<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="2385">
<package pkgid="0a86ea68dd37f1576f20258038f70e35578d16ec57477d694fdeabb97d7ff536" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.9.1" rel="12.el7_7"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-3" date="1553256000">- Bump version to 1.3.9.1-3
- Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
- Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
- Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
- Resolves: Bug 1673472 - the warning about skew time could last forever.
- Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
- Resolves: Bug 1482596 - referint update should discard any changes if mep update fails</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-4" date="1553860800">- Bump version to 1.3.9.1-4
- Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
- Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
- Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 &amp; 3)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-5" date="1556539200">- Bump version to 1.3.9.1-5
- Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
- Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
- Resolves: Bug 1615155 - extended search fails to match entries
- Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-6" date="1557489600">- Bump version to 1.3.9.1-6
- Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
- Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
- Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
- Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-7" date="1558008000">- Bump version to 1.3.9.1-7
- Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
- Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
- Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-8" date="1559736000">- Bump version to 1.3.9.1-8
- Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
- Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
- Resolves: Bug 1713361 - Update defaults.inf
- Resolves: Bug 1708215 - maxlogsperdir accepting negative values
- Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-9" date="1559908800">- Bump version to 1.3.9.1-9
- Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
- Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-10" date="1560427200">- Bump version to 1.3.9.1-10
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-11" date="1572264000">- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-12" date="1572609600">- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced</changelog>
</package>
<package pkgid="e5dcf1363c31a99e83386c8ddb602e65b53e9585def3d9c70d71ec32935b718d" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.9.1" rel="12.el7_7"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-3" date="1553256000">- Bump version to 1.3.9.1-3
- Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
- Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
- Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
- Resolves: Bug 1673472 - the warning about skew time could last forever.
- Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
- Resolves: Bug 1482596 - referint update should discard any changes if mep update fails</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-4" date="1553860800">- Bump version to 1.3.9.1-4
- Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
- Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
- Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 &amp; 3)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-5" date="1556539200">- Bump version to 1.3.9.1-5
- Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
- Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
- Resolves: Bug 1615155 - extended search fails to match entries
- Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-6" date="1557489600">- Bump version to 1.3.9.1-6
- Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
- Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
- Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
- Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-7" date="1558008000">- Bump version to 1.3.9.1-7
- Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
- Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
- Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-8" date="1559736000">- Bump version to 1.3.9.1-8
- Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
- Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
- Resolves: Bug 1713361 - Update defaults.inf
- Resolves: Bug 1708215 - maxlogsperdir accepting negative values
- Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-9" date="1559908800">- Bump version to 1.3.9.1-9
- Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
- Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-10" date="1560427200">- Bump version to 1.3.9.1-10
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-11" date="1572264000">- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-12" date="1572609600">- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced</changelog>
</package>
<package pkgid="84d6772fb0d2974598769a4d062fdd6351e1d91d16257707659a839f8b0574a0" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.9.1" rel="12.el7_7"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-3" date="1553256000">- Bump version to 1.3.9.1-3
- Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
- Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
- Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
- Resolves: Bug 1673472 - the warning about skew time could last forever.
- Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
- Resolves: Bug 1482596 - referint update should discard any changes if mep update fails</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-4" date="1553860800">- Bump version to 1.3.9.1-4
- Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
- Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
- Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 &amp; 3)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-5" date="1556539200">- Bump version to 1.3.9.1-5
- Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
- Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
- Resolves: Bug 1615155 - extended search fails to match entries
- Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-6" date="1557489600">- Bump version to 1.3.9.1-6
- Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
- Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
- Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
- Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-7" date="1558008000">- Bump version to 1.3.9.1-7
- Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
- Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
- Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-8" date="1559736000">- Bump version to 1.3.9.1-8
- Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
- Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
- Resolves: Bug 1713361 - Update defaults.inf
- Resolves: Bug 1708215 - maxlogsperdir accepting negative values
- Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-9" date="1559908800">- Bump version to 1.3.9.1-9
- Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
- Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-10" date="1560427200">- Bump version to 1.3.9.1-10
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-11" date="1572264000">- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-12" date="1572609600">- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced</changelog>
</package>
<package pkgid="abdb2cc742dc0abc930b04ac32cf02c7dea3aa9f04c41dd785bb1e35061f9ed1" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.9.1" rel="12.el7_7"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-3" date="1553256000">- Bump version to 1.3.9.1-3
- Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
- Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
- Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
- Resolves: Bug 1673472 - the warning about skew time could last forever.
- Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
- Resolves: Bug 1482596 - referint update should discard any changes if mep update fails</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-4" date="1553860800">- Bump version to 1.3.9.1-4
- Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
- Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
- Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 &amp; 3)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-5" date="1556539200">- Bump version to 1.3.9.1-5
- Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
- Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
- Resolves: Bug 1615155 - extended search fails to match entries
- Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-6" date="1557489600">- Bump version to 1.3.9.1-6
- Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
- Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
- Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
- Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-7" date="1558008000">- Bump version to 1.3.9.1-7
- Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
- Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
- Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-8" date="1559736000">- Bump version to 1.3.9.1-8
- Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
- Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
- Resolves: Bug 1713361 - Update defaults.inf
- Resolves: Bug 1708215 - maxlogsperdir accepting negative values
- Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-9" date="1559908800">- Bump version to 1.3.9.1-9
- Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
- Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-10" date="1560427200">- Bump version to 1.3.9.1-10
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-11" date="1572264000">- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-12" date="1572609600">- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced</changelog>
</package>
<package pkgid="d7f663fbb2a8f34787174d6c2527ffaa2020721f44a128f388b3a20ade7e8655" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.9.1" rel="12.el7_7"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-3" date="1553256000">- Bump version to 1.3.9.1-3
- Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
- Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
- Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
- Resolves: Bug 1673472 - the warning about skew time could last forever.
- Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
- Resolves: Bug 1482596 - referint update should discard any changes if mep update fails</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-4" date="1553860800">- Bump version to 1.3.9.1-4
- Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
- Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
- Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 &amp; 3)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-5" date="1556539200">- Bump version to 1.3.9.1-5
- Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
- Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
- Resolves: Bug 1615155 - extended search fails to match entries
- Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-6" date="1557489600">- Bump version to 1.3.9.1-6
- Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
- Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
- Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
- Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-7" date="1558008000">- Bump version to 1.3.9.1-7
- Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
- Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
- Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-8" date="1559736000">- Bump version to 1.3.9.1-8
- Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
- Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
- Resolves: Bug 1713361 - Update defaults.inf
- Resolves: Bug 1708215 - maxlogsperdir accepting negative values
- Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-9" date="1559908800">- Bump version to 1.3.9.1-9
- Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
- Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-10" date="1560427200">- Bump version to 1.3.9.1-10
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-11" date="1572264000">- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-12" date="1572609600">- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced</changelog>
</package>
<package pkgid="6b8f7eb7241d37dbeb66ad75912d2ebf273245258f11c13313792cb71d911cf6" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9.1" rel="12.el7_7"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-3" date="1553256000">- Bump version to 1.3.9.1-3
- Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
- Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
- Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
- Resolves: Bug 1673472 - the warning about skew time could last forever.
- Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
- Resolves: Bug 1482596 - referint update should discard any changes if mep update fails</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-4" date="1553860800">- Bump version to 1.3.9.1-4
- Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
- Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
- Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 &amp; 3)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-5" date="1556539200">- Bump version to 1.3.9.1-5
- Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
- Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
- Resolves: Bug 1615155 - extended search fails to match entries
- Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-6" date="1557489600">- Bump version to 1.3.9.1-6
- Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
- Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
- Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
- Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-7" date="1558008000">- Bump version to 1.3.9.1-7
- Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
- Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
- Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-8" date="1559736000">- Bump version to 1.3.9.1-8
- Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
- Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
- Resolves: Bug 1713361 - Update defaults.inf
- Resolves: Bug 1708215 - maxlogsperdir accepting negative values
- Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-9" date="1559908800">- Bump version to 1.3.9.1-9
- Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
- Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-10" date="1560427200">- Bump version to 1.3.9.1-10
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-11" date="1572264000">- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-12" date="1572609600">- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced</changelog>
</package>
<package pkgid="657b205fac86c0a152cd987e942c23a2017234eb5c210993514df3222402f37a" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.9.1" rel="12.el7_7"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-3" date="1553256000">- Bump version to 1.3.9.1-3
- Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
- Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
- Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
- Resolves: Bug 1673472 - the warning about skew time could last forever.
- Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
- Resolves: Bug 1482596 - referint update should discard any changes if mep update fails</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-4" date="1553860800">- Bump version to 1.3.9.1-4
- Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
- Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
- Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 &amp; 3)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-5" date="1556539200">- Bump version to 1.3.9.1-5
- Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
- Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
- Resolves: Bug 1615155 - extended search fails to match entries
- Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-6" date="1557489600">- Bump version to 1.3.9.1-6
- Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
- Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
- Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
- Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-7" date="1558008000">- Bump version to 1.3.9.1-7
- Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
- Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
- Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-8" date="1559736000">- Bump version to 1.3.9.1-8
- Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
- Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
- Resolves: Bug 1713361 - Update defaults.inf
- Resolves: Bug 1708215 - maxlogsperdir accepting negative values
- Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-9" date="1559908800">- Bump version to 1.3.9.1-9
- Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
- Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-10" date="1560427200">- Bump version to 1.3.9.1-10
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-11" date="1572264000">- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-12" date="1572609600">- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced</changelog>
</package>
<package pkgid="d3281da0b420581d6c7202a5ef3dbc8a6f64e7cf6256df462ec59ece87cf332c" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.9.1" rel="12.el7_7"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-3" date="1553256000">- Bump version to 1.3.9.1-3
- Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
- Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
- Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
- Resolves: Bug 1673472 - the warning about skew time could last forever.
- Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
- Resolves: Bug 1482596 - referint update should discard any changes if mep update fails</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-4" date="1553860800">- Bump version to 1.3.9.1-4
- Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
- Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
- Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 &amp; 3)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-5" date="1556539200">- Bump version to 1.3.9.1-5
- Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
- Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
- Resolves: Bug 1615155 - extended search fails to match entries
- Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-6" date="1557489600">- Bump version to 1.3.9.1-6
- Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
- Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
- Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
- Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-7" date="1558008000">- Bump version to 1.3.9.1-7
- Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
- Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
- Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-8" date="1559736000">- Bump version to 1.3.9.1-8
- Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
- Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
- Resolves: Bug 1713361 - Update defaults.inf
- Resolves: Bug 1708215 - maxlogsperdir accepting negative values
- Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-9" date="1559908800">- Bump version to 1.3.9.1-9
- Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
- Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-10" date="1560427200">- Bump version to 1.3.9.1-10
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-11" date="1572264000">- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-12" date="1572609600">- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced</changelog>
</package>
<package pkgid="7af28690629e393bbb0e8fd18c737c42ca090db346af996c494a0d9bf4dc1223" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.9.1" rel="12.el7_7"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-3" date="1553256000">- Bump version to 1.3.9.1-3
- Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
- Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
- Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
- Resolves: Bug 1673472 - the warning about skew time could last forever.
- Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
- Resolves: Bug 1482596 - referint update should discard any changes if mep update fails</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-4" date="1553860800">- Bump version to 1.3.9.1-4
- Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
- Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
- Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 &amp; 3)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-5" date="1556539200">- Bump version to 1.3.9.1-5
- Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
- Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
- Resolves: Bug 1615155 - extended search fails to match entries
- Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-6" date="1557489600">- Bump version to 1.3.9.1-6
- Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
- Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
- Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
- Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-7" date="1558008000">- Bump version to 1.3.9.1-7
- Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
- Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
- Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-8" date="1559736000">- Bump version to 1.3.9.1-8
- Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
- Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
- Resolves: Bug 1713361 - Update defaults.inf
- Resolves: Bug 1708215 - maxlogsperdir accepting negative values
- Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-9" date="1559908800">- Bump version to 1.3.9.1-9
- Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
- Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-10" date="1560427200">- Bump version to 1.3.9.1-10
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-11" date="1572264000">- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-12" date="1572609600">- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced</changelog>
</package>
<package pkgid="664b688ec95a344eb823d1ee854a2f348b4b3f15867d17e6d642d270e37a3d46" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.9.1" rel="12.el7_7"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-3" date="1553256000">- Bump version to 1.3.9.1-3
- Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
- Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
- Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
- Resolves: Bug 1673472 - the warning about skew time could last forever.
- Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
- Resolves: Bug 1482596 - referint update should discard any changes if mep update fails</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-4" date="1553860800">- Bump version to 1.3.9.1-4
- Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
- Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
- Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 &amp; 3)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-5" date="1556539200">- Bump version to 1.3.9.1-5
- Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
- Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
- Resolves: Bug 1615155 - extended search fails to match entries
- Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-6" date="1557489600">- Bump version to 1.3.9.1-6
- Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
- Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
- Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
- Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-7" date="1558008000">- Bump version to 1.3.9.1-7
- Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
- Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
- Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-8" date="1559736000">- Bump version to 1.3.9.1-8
- Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
- Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
- Resolves: Bug 1713361 - Update defaults.inf
- Resolves: Bug 1708215 - maxlogsperdir accepting negative values
- Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-9" date="1559908800">- Bump version to 1.3.9.1-9
- Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
- Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-10" date="1560427200">- Bump version to 1.3.9.1-10
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-11" date="1572264000">- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-12" date="1572609600">- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced</changelog>
</package>
<package pkgid="63d3e2f71cdf1326473a80715169c3caa696da25977eea4d2a344e5d86e4411f" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.9.1" rel="12.el7_7"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-3" date="1553256000">- Bump version to 1.3.9.1-3
- Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
- Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
- Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
- Resolves: Bug 1673472 - the warning about skew time could last forever.
- Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
- Resolves: Bug 1482596 - referint update should discard any changes if mep update fails</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-4" date="1553860800">- Bump version to 1.3.9.1-4
- Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
- Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
- Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 &amp; 3)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-5" date="1556539200">- Bump version to 1.3.9.1-5
- Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
- Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
- Resolves: Bug 1615155 - extended search fails to match entries
- Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-6" date="1557489600">- Bump version to 1.3.9.1-6
- Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
- Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
- Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
- Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-7" date="1558008000">- Bump version to 1.3.9.1-7
- Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
- Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
- Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-8" date="1559736000">- Bump version to 1.3.9.1-8
- Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
- Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
- Resolves: Bug 1713361 - Update defaults.inf
- Resolves: Bug 1708215 - maxlogsperdir accepting negative values
- Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-9" date="1559908800">- Bump version to 1.3.9.1-9
- Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
- Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-10" date="1560427200">- Bump version to 1.3.9.1-10
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-11" date="1572264000">- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-12" date="1572609600">- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced</changelog>
</package>
<package pkgid="4c0acf4a87fd70d2fd02a2a98d5deffd885c368f432f624d66e9e90f7d3c6ce9" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.9.1" rel="12.el7_7"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-3" date="1553256000">- Bump version to 1.3.9.1-3
- Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
- Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
- Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
- Resolves: Bug 1673472 - the warning about skew time could last forever.
- Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
- Resolves: Bug 1482596 - referint update should discard any changes if mep update fails</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-4" date="1553860800">- Bump version to 1.3.9.1-4
- Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
- Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
- Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 &amp; 3)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-5" date="1556539200">- Bump version to 1.3.9.1-5
- Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
- Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
- Resolves: Bug 1615155 - extended search fails to match entries
- Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-6" date="1557489600">- Bump version to 1.3.9.1-6
- Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
- Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
- Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
- Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-7" date="1558008000">- Bump version to 1.3.9.1-7
- Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
- Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
- Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-8" date="1559736000">- Bump version to 1.3.9.1-8
- Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
- Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
- Resolves: Bug 1713361 - Update defaults.inf
- Resolves: Bug 1708215 - maxlogsperdir accepting negative values
- Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-9" date="1559908800">- Bump version to 1.3.9.1-9
- Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
- Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-10" date="1560427200">- Bump version to 1.3.9.1-10
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-11" date="1572264000">- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-12" date="1572609600">- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced</changelog>
</package>
<package pkgid="f72027f2bc8ec363af06ee97a868bc171dffd15ca8b82b1b3b5e9977763fc030" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.9.1" rel="12.el7_7"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-3" date="1553256000">- Bump version to 1.3.9.1-3
- Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
- Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
- Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
- Resolves: Bug 1673472 - the warning about skew time could last forever.
- Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
- Resolves: Bug 1482596 - referint update should discard any changes if mep update fails</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-4" date="1553860800">- Bump version to 1.3.9.1-4
- Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
- Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
- Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 &amp; 3)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-5" date="1556539200">- Bump version to 1.3.9.1-5
- Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
- Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
- Resolves: Bug 1615155 - extended search fails to match entries
- Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-6" date="1557489600">- Bump version to 1.3.9.1-6
- Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
- Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
- Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
- Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-7" date="1558008000">- Bump version to 1.3.9.1-7
- Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
- Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
- Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-8" date="1559736000">- Bump version to 1.3.9.1-8
- Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
- Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
- Resolves: Bug 1713361 - Update defaults.inf
- Resolves: Bug 1708215 - maxlogsperdir accepting negative values
- Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-9" date="1559908800">- Bump version to 1.3.9.1-9
- Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
- Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-10" date="1560427200">- Bump version to 1.3.9.1-10
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-11" date="1572264000">- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-12" date="1572609600">- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced</changelog>
</package>
<package pkgid="49128bdede97e7b97f04de6a8962625a039b9b33ab0e3698a0c61eacdea1f788" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.9.1" rel="12.el7_7"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-3" date="1553256000">- Bump version to 1.3.9.1-3
- Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
- Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
- Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
- Resolves: Bug 1673472 - the warning about skew time could last forever.
- Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
- Resolves: Bug 1482596 - referint update should discard any changes if mep update fails</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-4" date="1553860800">- Bump version to 1.3.9.1-4
- Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
- Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
- Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 &amp; 3)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-5" date="1556539200">- Bump version to 1.3.9.1-5
- Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
- Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
- Resolves: Bug 1615155 - extended search fails to match entries
- Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-6" date="1557489600">- Bump version to 1.3.9.1-6
- Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
- Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
- Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
- Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-7" date="1558008000">- Bump version to 1.3.9.1-7
- Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
- Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
- Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-8" date="1559736000">- Bump version to 1.3.9.1-8
- Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
- Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
- Resolves: Bug 1713361 - Update defaults.inf
- Resolves: Bug 1708215 - maxlogsperdir accepting negative values
- Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-9" date="1559908800">- Bump version to 1.3.9.1-9
- Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
- Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-10" date="1560427200">- Bump version to 1.3.9.1-10
- Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-11" date="1572264000">- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.9.1-12" date="1572609600">- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced</changelog>
</package>
<package pkgid="7091f2fe632c5aaf54a9dbdb0163490b4f38f7d0d099e1d21e42b736508938ef" name="NetworkManager" arch="i686">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="dd38770207b1f08389d64ddc805412560dea13deaca0158b5dac39e0105501ad" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="f4b37d74f7ac875dc145b6a0b77edad0485a0c2a4230b39af4cc1316166d0b20" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="b8129705572c3c3d716f009e019955ca24594bfc7d2d0d7e3eaf048727cfc6ee" name="NetworkManager" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="45206e674ee5ed073da609bb20c39f8c59aac76e6221a8f3d65abda93e22222f" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="86e9a16d87fa46c6c492e279e1df1e9bf2b4715da2b7ee5a84df67bf8217126e" name="NetworkManager" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="d5d66351eeec72f8ab60b684a7563d3f814874b5ecf9cebc9980da70ec53d310" name="NetworkManager-adsl" arch="i686">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="f6d6b243bf3a9097667658cadcf28b1a3e0c726ddfbc5321a37a32871681b8fc" name="NetworkManager-adsl" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="13629f40a1f8f35de14e686df3494985f21fb06246c4f08ac60fa4ee30682469" name="NetworkManager-adsl" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="42b215857442ad12e7d9b1420363138c36c1369bcbf23c9fcbcc5fe1057cfeb8" name="NetworkManager-bluetooth" arch="i686">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="60d2463c419d389eaa789a57d27fc52868da8a8fb76fe5ce5581a85f60bde26f" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="83fbb8bb62f26803a3d75b6bbcf27d44a757a8b0bf84b1edd11ae0b4c74b2349" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="06e1128bbe8e29f66f3717e915ca960b9bd567176ce07d1262cc748f4e6917a5" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="756fba04980414bfd0dfb37689435ff22b562516c67a1d8224607cbd67270728" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="6f85daa3d93c38c54f1fa76aca6ee4dbb7337acb339537fba4f2ae2622b6472e" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="3109a5827fdbaa1f3090e412824d261d32a528b82de443d711f72a647c2271d8" name="NetworkManager-debuginfo" arch="i686">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="69454c1921ea81ec82fafc16fc02b03d761e00a57e1c94e0f8fdd04cb7b6e692" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="50591df3fb3c4a82a58916f30eb998e4c4f44edfd94c1770bbb84ab8e419de9c" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="2e6b1ac8f06378aba00466dfc97706fd6820703d07debadc9a18595a69ae1c4b" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="4a4b446a57175f5a4b47fbc5096c001d30aeb41e4e649232d2960fab7528b834" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="c44c28bcf6cbf45f304c9b7da6c259b43d087c5fc71a457b526b6b0f8a8ee080" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="219eb11ceb361440728c3e23f79a379071ab90bcec42f90723d08601d135f4e6" name="NetworkManager-glib" arch="i686">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="17e7967514c5ea3f27a43dec001089a8f78967e87f26f778c495e983cd5c47c1" name="NetworkManager-glib" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="a9e079c5d760a327b10172ad3ef662212798a6d7f625e63f2fa032bf4e5f3b07" name="NetworkManager-glib" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="0c50fa901647e0f54b7f7a510e2040552da73a7a9a860b3951dc1ccf06d04078" name="NetworkManager-glib-devel" arch="i686">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="d2f60b4321f8f338ff759460bacf4796ff931cc85b59450aec1778ad26e3ae37" name="NetworkManager-glib-devel" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="3babf8e1f9d48960d5faae9241b8c31736e7fe4ab56a4024e2a7ed3d17dc5fdd" name="NetworkManager-glib-devel" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="fe160f05133aac89194d7471c4b982cba45402831300d81c00b66336df42f653" name="NetworkManager-libnm" arch="i686">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="a8c9e4c362a24c942d87237127d3be8de3b7751ee4d23aecca0af21b1bc1066b" name="NetworkManager-libnm" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="1077a9dd610b5067c063a7b53a71876c7f9210efa5f247f892e1a338cd390710" name="NetworkManager-libnm" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="c89129752cf265e422c53620294e2c673909b517fd95537d8859b1ce6efd87b2" name="NetworkManager-libnm-devel" arch="i686">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="da81f0aad7fa6060b38f356e08dfa5da70423d7168eac49f858b41ea638c7714" name="NetworkManager-libnm-devel" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="8aad7add7e6b30a0b7d096a50733c357f924c168e590581afa769555098a444e" name="NetworkManager-libnm-devel" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="9fbd35b5612d98bebf47f7b12b6e5f5b13691edbaed6ba4aa4e8f32371eb254f" name="NetworkManager-ovs" arch="i686">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="6c46a1de1adc4490823226cdc2fb5709fd141969c59d43dfef5188305d40e036" name="NetworkManager-ovs" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="b4d811f7612da399bdb5ef5717c22affeaba4def21d068284cb90642fe0bb3ff" name="NetworkManager-ovs" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="65da36ba31ba968cac3ac2290b26f2536c458ecf817352aa6058b29317320361" name="NetworkManager-ppp" arch="i686">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="2054775a2cd7efa72331c4d863a9391fba8a4a4cc0376f01a15c849534b81ce1" name="NetworkManager-ppp" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="1dc71dda1def05a3dc4c0347939378ccbf8c5d0ed9fe055286388eef7a2d0151" name="NetworkManager-ppp" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="ad0773c934a96107e7ca5397cbf500fddf16cbe06194c9a581680a8d4a3e3834" name="NetworkManager-team" arch="i686">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="54bd842cf197f39fabbc30292e3c5a6715a3abb179fb0a86eb185591b3221eb0" name="NetworkManager-team" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="ff4afdd6e19541ce6ed66d16bf7fd5a9935195600fcf3391b6afdc5089e2caef" name="NetworkManager-team" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="eb45456e501973ead91f817b8df57288c6c785b6da861e948dd2089edcaa8e6a" name="NetworkManager-tui" arch="i686">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="4499fad87bd849fd5a01c2f0111cfa8f350b8b5be69e68a8384dacad5601571e" name="NetworkManager-tui" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="53422ea9e9e0aebf0516f65c7531037335a7345334362bc35b43df540c67e559" name="NetworkManager-tui" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="b1dda812b19d877eabe5202beaf401bea926e002ab3d662131cd19da2e1f211f" name="NetworkManager-wifi" arch="i686">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="eb626c7263186cb363c95f40742c73cacf224daf9c0d39c97499cc423c2b95ed" name="NetworkManager-wifi" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="6745e509ccf25d1041db838b2965636b4e5b969e508eef69111b9c333741d07d" name="NetworkManager-wifi" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="d1704b951ec0c4f3763b969a7822df384d3d9e5b91966b94429d7af676e594ac" name="NetworkManager-wwan" arch="i686">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="19815634449832e20f614d757411ff09585806926f79c9864ca18d4df9809204" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-0.3.20190408git43d9187c14" date="1554292800">- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">* core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
</package>
<package pkgid="f9e6dab6f6c8422cb49d0bea9dce10538581c787f715c42ac8b9faa21fe7cba1" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="1" ver="1.18.0" rel="5.el7_7.2"/>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.18.0-0.4.20190408git43d9187c14" date="1554897600">- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.5" date="1555416000">- Update to 1.18-rc1 (1.17.90) snapshot</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-0.6" date="1555416001">- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.0-1" date="1555848000">- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-2" date="1557144000">- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-3" date="1558353600">- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-4" date="1560772800">- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.18.0-5" date="1561550400">- po: update translations (rh #1689962)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.1" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-5.2" date="1579176000">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
</package>
<package pkgid="c199f5bf89e79fafa6083cd37d1fbf4b254be04223d1636e3627ca710cdf5a4f" name="SDL" arch="i686">
  <version epoch="0" ver="1.2.15" rel="15.el7_7"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-5" date="1358942400">- Work around bug in Xorg to allow changing gamma on X11 (bug #891973)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.15-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-7" date="1364385600">- Update config.sub to support aarch64 (bug #926510)
- Adapt to libX11-1.5.99.901</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-8" date="1369310400">- Update header files to support aarch64 (bug #966115)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-9" date="1371643200">- Add sdl-config(1) manual page (bug #948864)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-13" date="1402401600">- Add support for ppc64le architecture (bug #1119370)
- bump version to match changelog</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-14" date="1438171200">- Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
  environment variable to enable it.
- Resolves: rhbz#1245417</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.15-15" date="1574856000">- Fix CVE-2019-13616 (a heap buffer over-read in BlitNtoN) (bug #1747237)
- Resolves: rhbz#1756276</changelog>
</package>
<package pkgid="8638328fbc8630be5a46e57046dafe55c6c33ec83b6a478bd0d16d3e2ca568dc" name="SDL" arch="src">
  <version epoch="0" ver="1.2.15" rel="15.el7_7"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-5" date="1358942400">- Work around bug in Xorg to allow changing gamma on X11 (bug #891973)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.15-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-7" date="1364385600">- Update config.sub to support aarch64 (bug #926510)
- Adapt to libX11-1.5.99.901</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-8" date="1369310400">- Update header files to support aarch64 (bug #966115)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-9" date="1371643200">- Add sdl-config(1) manual page (bug #948864)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-13" date="1402401600">- Add support for ppc64le architecture (bug #1119370)
- bump version to match changelog</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-14" date="1438171200">- Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
  environment variable to enable it.
- Resolves: rhbz#1245417</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.15-15" date="1574856000">- Fix CVE-2019-13616 (a heap buffer over-read in BlitNtoN) (bug #1747237)
- Resolves: rhbz#1756276</changelog>
</package>
<package pkgid="c996e7b829c5906918a0f3b5d6ff46bd9b8cd1b1715c15a5975a43f8cc650198" name="SDL" arch="src">
  <version epoch="0" ver="1.2.15" rel="15.el7_7"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-5" date="1358942400">- Work around bug in Xorg to allow changing gamma on X11 (bug #891973)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.15-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-7" date="1364385600">- Update config.sub to support aarch64 (bug #926510)
- Adapt to libX11-1.5.99.901</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-8" date="1369310400">- Update header files to support aarch64 (bug #966115)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-9" date="1371643200">- Add sdl-config(1) manual page (bug #948864)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-13" date="1402401600">- Add support for ppc64le architecture (bug #1119370)
- bump version to match changelog</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-14" date="1438171200">- Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
  environment variable to enable it.
- Resolves: rhbz#1245417</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.15-15" date="1574856000">- Fix CVE-2019-13616 (a heap buffer over-read in BlitNtoN) (bug #1747237)
- Resolves: rhbz#1756276</changelog>
</package>
<package pkgid="15808eb54a9516a2dbc8aa159f1f308d2abe05b43d3349ee119a8bab267a6d45" name="SDL" arch="x86_64">
  <version epoch="0" ver="1.2.15" rel="15.el7_7"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-5" date="1358942400">- Work around bug in Xorg to allow changing gamma on X11 (bug #891973)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.15-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-7" date="1364385600">- Update config.sub to support aarch64 (bug #926510)
- Adapt to libX11-1.5.99.901</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-8" date="1369310400">- Update header files to support aarch64 (bug #966115)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-9" date="1371643200">- Add sdl-config(1) manual page (bug #948864)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-13" date="1402401600">- Add support for ppc64le architecture (bug #1119370)
- bump version to match changelog</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-14" date="1438171200">- Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
  environment variable to enable it.
- Resolves: rhbz#1245417</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.15-15" date="1574856000">- Fix CVE-2019-13616 (a heap buffer over-read in BlitNtoN) (bug #1747237)
- Resolves: rhbz#1756276</changelog>
</package>
<package pkgid="7ad81848888dd7b05b9cd3973134cc6a0939d1e77c437f908e301a7fd0fcb788" name="SDL-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.15" rel="15.el7_7"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-5" date="1358942400">- Work around bug in Xorg to allow changing gamma on X11 (bug #891973)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.15-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-7" date="1364385600">- Update config.sub to support aarch64 (bug #926510)
- Adapt to libX11-1.5.99.901</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-8" date="1369310400">- Update header files to support aarch64 (bug #966115)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-9" date="1371643200">- Add sdl-config(1) manual page (bug #948864)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-13" date="1402401600">- Add support for ppc64le architecture (bug #1119370)
- bump version to match changelog</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-14" date="1438171200">- Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
  environment variable to enable it.
- Resolves: rhbz#1245417</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.15-15" date="1574856000">- Fix CVE-2019-13616 (a heap buffer over-read in BlitNtoN) (bug #1747237)
- Resolves: rhbz#1756276</changelog>
</package>
<package pkgid="faf0510ea052ffa8754d9c0395f3bc42966c6198a84ecfedea70cf9af9c208da" name="SDL-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.15" rel="15.el7_7"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-5" date="1358942400">- Work around bug in Xorg to allow changing gamma on X11 (bug #891973)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.15-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-7" date="1364385600">- Update config.sub to support aarch64 (bug #926510)
- Adapt to libX11-1.5.99.901</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-8" date="1369310400">- Update header files to support aarch64 (bug #966115)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-9" date="1371643200">- Add sdl-config(1) manual page (bug #948864)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-13" date="1402401600">- Add support for ppc64le architecture (bug #1119370)
- bump version to match changelog</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-14" date="1438171200">- Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
  environment variable to enable it.
- Resolves: rhbz#1245417</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.15-15" date="1574856000">- Fix CVE-2019-13616 (a heap buffer over-read in BlitNtoN) (bug #1747237)
- Resolves: rhbz#1756276</changelog>
</package>
<package pkgid="1bac04fffd0f76854ac68f805259847679f6ddb9151f72940bb0b967d98f27c3" name="SDL-devel" arch="i686">
  <version epoch="0" ver="1.2.15" rel="15.el7_7"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-5" date="1358942400">- Work around bug in Xorg to allow changing gamma on X11 (bug #891973)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.15-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-7" date="1364385600">- Update config.sub to support aarch64 (bug #926510)
- Adapt to libX11-1.5.99.901</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-8" date="1369310400">- Update header files to support aarch64 (bug #966115)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-9" date="1371643200">- Add sdl-config(1) manual page (bug #948864)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-13" date="1402401600">- Add support for ppc64le architecture (bug #1119370)
- bump version to match changelog</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-14" date="1438171200">- Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
  environment variable to enable it.
- Resolves: rhbz#1245417</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.15-15" date="1574856000">- Fix CVE-2019-13616 (a heap buffer over-read in BlitNtoN) (bug #1747237)
- Resolves: rhbz#1756276</changelog>
</package>
<package pkgid="7b9c26fbf1e8e38784bac5bb9f415072d70afecdd464574db09ef275ee984a27" name="SDL-devel" arch="x86_64">
  <version epoch="0" ver="1.2.15" rel="15.el7_7"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-5" date="1358942400">- Work around bug in Xorg to allow changing gamma on X11 (bug #891973)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.15-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-7" date="1364385600">- Update config.sub to support aarch64 (bug #926510)
- Adapt to libX11-1.5.99.901</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-8" date="1369310400">- Update header files to support aarch64 (bug #966115)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-9" date="1371643200">- Add sdl-config(1) manual page (bug #948864)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-13" date="1402401600">- Add support for ppc64le architecture (bug #1119370)
- bump version to match changelog</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-14" date="1438171200">- Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
  environment variable to enable it.
- Resolves: rhbz#1245417</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.15-15" date="1574856000">- Fix CVE-2019-13616 (a heap buffer over-read in BlitNtoN) (bug #1747237)
- Resolves: rhbz#1756276</changelog>
</package>
<package pkgid="83a6f87ead3b01ded39a6f9e3d152a4954bd4da7bddb18163dcbc4c2deba0ef9" name="SDL-static" arch="i686">
  <version epoch="0" ver="1.2.15" rel="15.el7_7"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-5" date="1358942400">- Work around bug in Xorg to allow changing gamma on X11 (bug #891973)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.15-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-7" date="1364385600">- Update config.sub to support aarch64 (bug #926510)
- Adapt to libX11-1.5.99.901</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-8" date="1369310400">- Update header files to support aarch64 (bug #966115)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-9" date="1371643200">- Add sdl-config(1) manual page (bug #948864)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-13" date="1402401600">- Add support for ppc64le architecture (bug #1119370)
- bump version to match changelog</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-14" date="1438171200">- Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
  environment variable to enable it.
- Resolves: rhbz#1245417</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.15-15" date="1574856000">- Fix CVE-2019-13616 (a heap buffer over-read in BlitNtoN) (bug #1747237)
- Resolves: rhbz#1756276</changelog>
</package>
<package pkgid="9c90e40c3bae2f1b10cea777fd3a49f2228e970b820fc8c1f7bca5f1f6a963fc" name="SDL-static" arch="x86_64">
  <version epoch="0" ver="1.2.15" rel="15.el7_7"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-5" date="1358942400">- Work around bug in Xorg to allow changing gamma on X11 (bug #891973)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.15-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-7" date="1364385600">- Update config.sub to support aarch64 (bug #926510)
- Adapt to libX11-1.5.99.901</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-8" date="1369310400">- Update header files to support aarch64 (bug #966115)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-9" date="1371643200">- Add sdl-config(1) manual page (bug #948864)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.15-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-13" date="1402401600">- Add support for ppc64le architecture (bug #1119370)
- bump version to match changelog</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.2.15-14" date="1438171200">- Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
  environment variable to enable it.
- Resolves: rhbz#1245417</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.15-15" date="1574856000">- Fix CVE-2019-13616 (a heap buffer over-read in BlitNtoN) (bug #1747237)
- Resolves: rhbz#1756276</changelog>
</package>
<package pkgid="4e01ed1dde51294b40789fcf596504934faa9df5102564e7812440d41259fd13" name="accountsservice" arch="i686">
  <version epoch="0" ver="0.6.50" rel="6.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-4" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-5" date="1517313600">- Fix other crasher introduced in -3
  Resolves: #1532252</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-6" date="1518004800">- Don't return bogus password expiration policy when
  shadow file is unavailable
  Resolves: #1530659</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-7" date="1518609600">- Fix bug leading to harmless error in log
  Resolves: #1544640</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.49-1" date="1527854400">- Update to 0.6.49
  Resolves: #1576538</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-1" date="1532001600">- Update to 0.6.50
  Related: #1576538
  Related:  1596735
  Related:  1602918</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-2" date="1532001601">- Fix user switching
  Resolves: #1597350</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-5" date="1557489600">- Don't send change updates for login-history
  Resolves: #1708741</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-6" date="1560772800">- Make sure cache file is read for root user
  Resolves: #1741098</changelog>
</package>
<package pkgid="a8e4ed797c8dfcf8def746b87a8969db4af17f753bb5aef63ad37c2a2b1fbf21" name="accountsservice" arch="src">
  <version epoch="0" ver="0.6.50" rel="6.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-4" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-5" date="1517313600">- Fix other crasher introduced in -3
  Resolves: #1532252</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-6" date="1518004800">- Don't return bogus password expiration policy when
  shadow file is unavailable
  Resolves: #1530659</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-7" date="1518609600">- Fix bug leading to harmless error in log
  Resolves: #1544640</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.49-1" date="1527854400">- Update to 0.6.49
  Resolves: #1576538</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-1" date="1532001600">- Update to 0.6.50
  Related: #1576538
  Related:  1596735
  Related:  1602918</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-2" date="1532001601">- Fix user switching
  Resolves: #1597350</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-5" date="1557489600">- Don't send change updates for login-history
  Resolves: #1708741</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-6" date="1560772800">- Make sure cache file is read for root user
  Resolves: #1741098</changelog>
</package>
<package pkgid="70df14d206d1226b8d05a2d5685ae76266c354fddc820eeaff02b7788764263d" name="accountsservice" arch="src">
  <version epoch="0" ver="0.6.50" rel="6.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-4" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-5" date="1517313600">- Fix other crasher introduced in -3
  Resolves: #1532252</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-6" date="1518004800">- Don't return bogus password expiration policy when
  shadow file is unavailable
  Resolves: #1530659</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-7" date="1518609600">- Fix bug leading to harmless error in log
  Resolves: #1544640</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.49-1" date="1527854400">- Update to 0.6.49
  Resolves: #1576538</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-1" date="1532001600">- Update to 0.6.50
  Related: #1576538
  Related:  1596735
  Related:  1602918</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-2" date="1532001601">- Fix user switching
  Resolves: #1597350</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-5" date="1557489600">- Don't send change updates for login-history
  Resolves: #1708741</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-6" date="1560772800">- Make sure cache file is read for root user
  Resolves: #1741098</changelog>
</package>
<package pkgid="e0dd29dd9f5e5f9663f14feb3ea218f9919e29b24e5947bc9ef373bd0845e66a" name="accountsservice" arch="x86_64">
  <version epoch="0" ver="0.6.50" rel="6.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-4" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-5" date="1517313600">- Fix other crasher introduced in -3
  Resolves: #1532252</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-6" date="1518004800">- Don't return bogus password expiration policy when
  shadow file is unavailable
  Resolves: #1530659</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-7" date="1518609600">- Fix bug leading to harmless error in log
  Resolves: #1544640</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.49-1" date="1527854400">- Update to 0.6.49
  Resolves: #1576538</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-1" date="1532001600">- Update to 0.6.50
  Related: #1576538
  Related:  1596735
  Related:  1602918</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-2" date="1532001601">- Fix user switching
  Resolves: #1597350</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-5" date="1557489600">- Don't send change updates for login-history
  Resolves: #1708741</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-6" date="1560772800">- Make sure cache file is read for root user
  Resolves: #1741098</changelog>
</package>
<package pkgid="80bc8bc7a82ed35b0b2168998834b256402fd9f4e37d654d58e5a997a297f5c1" name="accountsservice-debuginfo" arch="i686">
  <version epoch="0" ver="0.6.50" rel="6.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-4" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-5" date="1517313600">- Fix other crasher introduced in -3
  Resolves: #1532252</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-6" date="1518004800">- Don't return bogus password expiration policy when
  shadow file is unavailable
  Resolves: #1530659</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-7" date="1518609600">- Fix bug leading to harmless error in log
  Resolves: #1544640</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.49-1" date="1527854400">- Update to 0.6.49
  Resolves: #1576538</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-1" date="1532001600">- Update to 0.6.50
  Related: #1576538
  Related:  1596735
  Related:  1602918</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-2" date="1532001601">- Fix user switching
  Resolves: #1597350</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-5" date="1557489600">- Don't send change updates for login-history
  Resolves: #1708741</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-6" date="1560772800">- Make sure cache file is read for root user
  Resolves: #1741098</changelog>
</package>
<package pkgid="2c3492707382775240c8b0987a2c33551610b54fa0ab59d8236f93d5fadd4c5e" name="accountsservice-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.6.50" rel="6.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-4" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-5" date="1517313600">- Fix other crasher introduced in -3
  Resolves: #1532252</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-6" date="1518004800">- Don't return bogus password expiration policy when
  shadow file is unavailable
  Resolves: #1530659</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-7" date="1518609600">- Fix bug leading to harmless error in log
  Resolves: #1544640</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.49-1" date="1527854400">- Update to 0.6.49
  Resolves: #1576538</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-1" date="1532001600">- Update to 0.6.50
  Related: #1576538
  Related:  1596735
  Related:  1602918</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-2" date="1532001601">- Fix user switching
  Resolves: #1597350</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-5" date="1557489600">- Don't send change updates for login-history
  Resolves: #1708741</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-6" date="1560772800">- Make sure cache file is read for root user
  Resolves: #1741098</changelog>
</package>
<package pkgid="8b293c79226af4ddf18d9f2b60aa15659edc3b31b2c71e605e5428ab356dce7c" name="accountsservice-devel" arch="i686">
  <version epoch="0" ver="0.6.50" rel="6.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-4" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-5" date="1517313600">- Fix other crasher introduced in -3
  Resolves: #1532252</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-6" date="1518004800">- Don't return bogus password expiration policy when
  shadow file is unavailable
  Resolves: #1530659</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-7" date="1518609600">- Fix bug leading to harmless error in log
  Resolves: #1544640</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.49-1" date="1527854400">- Update to 0.6.49
  Resolves: #1576538</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-1" date="1532001600">- Update to 0.6.50
  Related: #1576538
  Related:  1596735
  Related:  1602918</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-2" date="1532001601">- Fix user switching
  Resolves: #1597350</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-5" date="1557489600">- Don't send change updates for login-history
  Resolves: #1708741</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-6" date="1560772800">- Make sure cache file is read for root user
  Resolves: #1741098</changelog>
</package>
<package pkgid="b93ee8104f379ba5c30eb4b0eb5b34bcad68a5d81c6d6b8f37e64c2209d18cdc" name="accountsservice-devel" arch="x86_64">
  <version epoch="0" ver="0.6.50" rel="6.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-4" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-5" date="1517313600">- Fix other crasher introduced in -3
  Resolves: #1532252</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-6" date="1518004800">- Don't return bogus password expiration policy when
  shadow file is unavailable
  Resolves: #1530659</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-7" date="1518609600">- Fix bug leading to harmless error in log
  Resolves: #1544640</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.49-1" date="1527854400">- Update to 0.6.49
  Resolves: #1576538</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-1" date="1532001600">- Update to 0.6.50
  Related: #1576538
  Related:  1596735
  Related:  1602918</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-2" date="1532001601">- Fix user switching
  Resolves: #1597350</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-5" date="1557489600">- Don't send change updates for login-history
  Resolves: #1708741</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-6" date="1560772800">- Make sure cache file is read for root user
  Resolves: #1741098</changelog>
</package>
<package pkgid="51d698aec4d3bb1c00a96e76985b90027e71eab839618c5c3a62426ab6c37fed" name="accountsservice-libs" arch="i686">
  <version epoch="0" ver="0.6.50" rel="6.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-4" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-5" date="1517313600">- Fix other crasher introduced in -3
  Resolves: #1532252</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-6" date="1518004800">- Don't return bogus password expiration policy when
  shadow file is unavailable
  Resolves: #1530659</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-7" date="1518609600">- Fix bug leading to harmless error in log
  Resolves: #1544640</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.49-1" date="1527854400">- Update to 0.6.49
  Resolves: #1576538</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-1" date="1532001600">- Update to 0.6.50
  Related: #1576538
  Related:  1596735
  Related:  1602918</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-2" date="1532001601">- Fix user switching
  Resolves: #1597350</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-5" date="1557489600">- Don't send change updates for login-history
  Resolves: #1708741</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-6" date="1560772800">- Make sure cache file is read for root user
  Resolves: #1741098</changelog>
</package>
<package pkgid="ba797e2fd09ec7e3830082377356b49246c2cdfc85b2ca89572bc75460d38381" name="accountsservice-libs" arch="x86_64">
  <version epoch="0" ver="0.6.50" rel="6.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-4" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-5" date="1517313600">- Fix other crasher introduced in -3
  Resolves: #1532252</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-6" date="1518004800">- Don't return bogus password expiration policy when
  shadow file is unavailable
  Resolves: #1530659</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-7" date="1518609600">- Fix bug leading to harmless error in log
  Resolves: #1544640</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.49-1" date="1527854400">- Update to 0.6.49
  Resolves: #1576538</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-1" date="1532001600">- Update to 0.6.50
  Related: #1576538
  Related:  1596735
  Related:  1602918</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-2" date="1532001601">- Fix user switching
  Resolves: #1597350</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-5" date="1557489600">- Don't send change updates for login-history
  Resolves: #1708741</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-6" date="1560772800">- Make sure cache file is read for root user
  Resolves: #1741098</changelog>
</package>
<package pkgid="025e7ef607da1a4ea7ca5595126198d61a1d078015883ad1528383d1b50e9c2d" name="apache-commons-beanutils" arch="noarch">
  <version epoch="0" ver="1.8.3" rel="15.el7_7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.8.3-6" date="1326369600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.8.3-7" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 1.8.3-8" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.8.3-9" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.3-10" date="1367236800">- Build with xmvn
- Don't generate extra JARs
- Simplify build dependencies
- Update to current packaging guidelines</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.3-11" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.3-12" date="1373630400">- Remove workaround for rpm bug #646523</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.3-13" date="1379678400">- Add BuildRequires on apache-commons-parent &gt;= 26-7
- Remove BuildRequires on commons-collections-testframework</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.8.3-15" date="1576843200">- Fix CVE-2014-0114
- Fix CVE-2019-10086</changelog>
</package>
<package pkgid="0b2bd0cecaf8b76c55b09a9a0d3c6854e50fe656974f9335fee0af4eaedc763f" name="apache-commons-beanutils" arch="src">
  <version epoch="0" ver="1.8.3" rel="15.el7_7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.8.3-6" date="1326369600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.8.3-7" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 1.8.3-8" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.8.3-9" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.3-10" date="1367236800">- Build with xmvn
- Don't generate extra JARs
- Simplify build dependencies
- Update to current packaging guidelines</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.3-11" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.3-12" date="1373630400">- Remove workaround for rpm bug #646523</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.3-13" date="1379678400">- Add BuildRequires on apache-commons-parent &gt;= 26-7
- Remove BuildRequires on commons-collections-testframework</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.8.3-15" date="1576843200">- Fix CVE-2014-0114
- Fix CVE-2019-10086</changelog>
</package>
<package pkgid="48bee5ea9cf36d9d2788c9b2c1d6978f6dca16895105d06d8ca4eb9038c48007" name="apache-commons-beanutils-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.3" rel="15.el7_7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.8.3-6" date="1326369600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.8.3-7" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 1.8.3-8" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.8.3-9" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.3-10" date="1367236800">- Build with xmvn
- Don't generate extra JARs
- Simplify build dependencies
- Update to current packaging guidelines</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.3-11" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.3-12" date="1373630400">- Remove workaround for rpm bug #646523</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.3-13" date="1379678400">- Add BuildRequires on apache-commons-parent &gt;= 26-7
- Remove BuildRequires on commons-collections-testframework</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.8.3-15" date="1576843200">- Fix CVE-2014-0114
- Fix CVE-2019-10086</changelog>
</package>
<package pkgid="5fbcdb32f0c3a5ad63b78fe91b2a5f76cd97d0cb1b1516db4b7bd0edfea43ae1" name="binutils" arch="i686">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-33.base" date="1526558400">- Fix seg-fault parsing ELF files.  (#1578979)
- Fix seg-fault parsing DWARF-2 information.  (#1579065)
- Fix seg-fault parsing DWARF-2 information.  (#1579051)
- Fix seg-fault parsing a PE format file.  (#1579019)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
</package>
<package pkgid="58102caf9844a9137a86840a05da5117321183c8b1abac9048c567d4ca25c946" name="binutils" arch="src">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-33.base" date="1526558400">- Fix seg-fault parsing ELF files.  (#1578979)
- Fix seg-fault parsing DWARF-2 information.  (#1579065)
- Fix seg-fault parsing DWARF-2 information.  (#1579051)
- Fix seg-fault parsing a PE format file.  (#1579019)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
</package>
<package pkgid="45315da826e909659c551bf5876d2bcdbe08e35f39b7d46cdeb9919190cbf0d1" name="binutils" arch="src">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-33.base" date="1526558400">- Fix seg-fault parsing ELF files.  (#1578979)
- Fix seg-fault parsing DWARF-2 information.  (#1579065)
- Fix seg-fault parsing DWARF-2 information.  (#1579051)
- Fix seg-fault parsing a PE format file.  (#1579019)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
</package>
<package pkgid="d1844ef4ccfcdf0849fb55e3e1a351db284394282c0a407dc06c69e43a762b9c" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-33.base" date="1526558400">- Fix seg-fault parsing ELF files.  (#1578979)
- Fix seg-fault parsing DWARF-2 information.  (#1579065)
- Fix seg-fault parsing DWARF-2 information.  (#1579051)
- Fix seg-fault parsing a PE format file.  (#1579019)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
</package>
<package pkgid="ba1e3b7cbb1bb3459681a8ed3af8e4e650316f405c15cccf05347d1370243246" name="binutils" arch="i686">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.2"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base.2" date="1576152000">- Implement assembler workaround for Intel JCC microcode bug.  (#1782776)</changelog>
</package>
<package pkgid="d3b25b497d73463e5711b6b7ea5b29e793cb79d3726824e6bf1d101af6c95b47" name="binutils" arch="src">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.2"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base.2" date="1576152000">- Implement assembler workaround for Intel JCC microcode bug.  (#1782776)</changelog>
</package>
<package pkgid="99bcadc1ad3dea4a3eb04d46048a971709f8dd379800879680dbb0f141f1c029" name="binutils" arch="src">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.2"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base.2" date="1576152000">- Implement assembler workaround for Intel JCC microcode bug.  (#1782776)</changelog>
</package>
<package pkgid="d28e74b522e1e7fdd222dfe66436f464beae634347a2ce990bb76bbaf09280d9" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.2"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base.2" date="1576152000">- Implement assembler workaround for Intel JCC microcode bug.  (#1782776)</changelog>
</package>
<package pkgid="856e56142037e4c4563ce9f2974e928dfa6d294d20088437d66f7e1768f76da5" name="binutils-debuginfo" arch="i686">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-33.base" date="1526558400">- Fix seg-fault parsing ELF files.  (#1578979)
- Fix seg-fault parsing DWARF-2 information.  (#1579065)
- Fix seg-fault parsing DWARF-2 information.  (#1579051)
- Fix seg-fault parsing a PE format file.  (#1579019)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
</package>
<package pkgid="daf839d176a6c96233753948b85f1f7a8e5a8dec78b6ea18cd77a119883b0b9a" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-33.base" date="1526558400">- Fix seg-fault parsing ELF files.  (#1578979)
- Fix seg-fault parsing DWARF-2 information.  (#1579065)
- Fix seg-fault parsing DWARF-2 information.  (#1579051)
- Fix seg-fault parsing a PE format file.  (#1579019)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
</package>
<package pkgid="f53756d78fc343c6029ac7b420af13e6436f0a40395d2ec3f69acd8c7547dbec" name="binutils-debuginfo" arch="i686">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.2"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base.2" date="1576152000">- Implement assembler workaround for Intel JCC microcode bug.  (#1782776)</changelog>
</package>
<package pkgid="9344c7e590310dadebe8005302ba490e2c0d91ba90653a2c8dafaf8e7f4a9424" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.2"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base.2" date="1576152000">- Implement assembler workaround for Intel JCC microcode bug.  (#1782776)</changelog>
</package>
<package pkgid="1a991adf8c9bc7906caa83a1c1799131e5416d897f1239b888a48a02ffa232f3" name="binutils-devel" arch="i686">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-33.base" date="1526558400">- Fix seg-fault parsing ELF files.  (#1578979)
- Fix seg-fault parsing DWARF-2 information.  (#1579065)
- Fix seg-fault parsing DWARF-2 information.  (#1579051)
- Fix seg-fault parsing a PE format file.  (#1579019)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
</package>
<package pkgid="53f80bf85a7c8719c144b71faebddfbf34dd2f44717cb86441e177d89a54b39d" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-33.base" date="1526558400">- Fix seg-fault parsing ELF files.  (#1578979)
- Fix seg-fault parsing DWARF-2 information.  (#1579065)
- Fix seg-fault parsing DWARF-2 information.  (#1579051)
- Fix seg-fault parsing a PE format file.  (#1579019)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
</package>
<package pkgid="f917aedcbedd5f5c7ae8ee1d886f82c67e70c826388d408622ae3562e69faf78" name="binutils-devel" arch="i686">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.2"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base.2" date="1576152000">- Implement assembler workaround for Intel JCC microcode bug.  (#1782776)</changelog>
</package>
<package pkgid="314df6c1d3fb2ceb1f668f17105ab52623dde4abced0a8a991d68ea4f776645d" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.27" rel="41.base.el7_7.2"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-34.base" date="1527681600">- Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
- Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
- Fix seg-fault parsing corrupt ELF format files.  (#1579801)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base.1" date="1569499200">- Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base.2" date="1576152000">- Implement assembler workaround for Intel JCC microcode bug.  (#1782776)</changelog>
</package>
<package pkgid="8910e43f43566935b61602637af519fea573d94d094e8f7140a00ff676656f05" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="1bbb3b6371b10e81dbddd93e3e1773a03e3721695c38f57ebde8f77c11f3794e" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="b276c01d6fd360fad4de482dc2887b7faaaf65dea023194eb175f81bb635c2b3" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="c3152aec47963aae6c210e84abc617dab0d2ee38a598258ee7841207fba7de99" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="069f4ef5c7d2e35cb7556a357f33296ce54924dab8b7d956c86e673f4aa4007a" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="e9c91ea015af5c7027f3238fbf783581ad03467b693ffa339447a5158f7ab57f" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="7c7cebcff255a2e4bb8bb83aa4687e35b2ddefd83421d17f04d58b822cd821c7" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="5bbbbea353d632e241d7af1f49f88f07cb16691ea83db6db2159a3547bb3dd61" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="7cf5c7ee503d5aa8a466dcf3a97903a861da7c2d777df4f7a54a8981d6ab17bd" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="8ec21bf3e3a7ae31c783364f36fa5ab27f5f098dfab4329a6c46cf2663e5ffa8" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="f4751785214e68388450dc145612ba47a3883372df8a547265a33856bd83e34a" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="3632780f3d43cc53d0710fb50f3db8426c7e583250ef1e1a5309cdef35a2b5ef" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="e4b9cb3571d2d8581e6d624f9a27caf1f9637a75c86b645074a7b286c7475347" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="4399cba64c4f234a75c643d4e6ca062ea8e72881ceaf079f3b07ab2196400baa" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="86df5d6df582bde54a31afa318bb3902e4d71633bb33738b51eee41181721426" name="bsdcpio" arch="i686">
  <version epoch="0" ver="3.1.2" rel="14.el7_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-5" date="1374494400">- try to workaround racy testsuite fail</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-8" date="1467979200">- a bunch of security fixes (rhbz#1353065)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-9" date="1470916800">- Fixes CVE-2016-5418: Archive Entry with type 1 (hardlink) causes file overwrite (#1365777)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-10" date="1471003200">- Fixes variation of CVE-2016-5418: Hard links could include ".." in their path.</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-11" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.1.2-12" date="1556625600">- fixed use after free in RAR decoder (#1700749)
- fixed double free in RAR decoder (#1700748)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-13" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-14" date="1579262400">- Fix patch application error</changelog>
</package>
<package pkgid="3e515c27ba6330bf2f6b49bf2408a733351634db7bcbbe62f73206492793ee4f" name="bsdcpio" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="14.el7_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-5" date="1374494400">- try to workaround racy testsuite fail</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-8" date="1467979200">- a bunch of security fixes (rhbz#1353065)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-9" date="1470916800">- Fixes CVE-2016-5418: Archive Entry with type 1 (hardlink) causes file overwrite (#1365777)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-10" date="1471003200">- Fixes variation of CVE-2016-5418: Hard links could include ".." in their path.</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-11" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.1.2-12" date="1556625600">- fixed use after free in RAR decoder (#1700749)
- fixed double free in RAR decoder (#1700748)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-13" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-14" date="1579262400">- Fix patch application error</changelog>
</package>
<package pkgid="aa3ad77eae79cc14228837ae2eafdc7a0e7cb9f16f28deec3c853f21e3b29be0" name="bsdtar" arch="i686">
  <version epoch="0" ver="3.1.2" rel="14.el7_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-5" date="1374494400">- try to workaround racy testsuite fail</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-8" date="1467979200">- a bunch of security fixes (rhbz#1353065)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-9" date="1470916800">- Fixes CVE-2016-5418: Archive Entry with type 1 (hardlink) causes file overwrite (#1365777)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-10" date="1471003200">- Fixes variation of CVE-2016-5418: Hard links could include ".." in their path.</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-11" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.1.2-12" date="1556625600">- fixed use after free in RAR decoder (#1700749)
- fixed double free in RAR decoder (#1700748)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-13" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-14" date="1579262400">- Fix patch application error</changelog>
</package>
<package pkgid="0998796eca02f09f376b8cbfe92272c5ba3ca19c9cb9a60db4a3cd65842d7b22" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="14.el7_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-5" date="1374494400">- try to workaround racy testsuite fail</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-8" date="1467979200">- a bunch of security fixes (rhbz#1353065)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-9" date="1470916800">- Fixes CVE-2016-5418: Archive Entry with type 1 (hardlink) causes file overwrite (#1365777)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-10" date="1471003200">- Fixes variation of CVE-2016-5418: Hard links could include ".." in their path.</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-11" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.1.2-12" date="1556625600">- fixed use after free in RAR decoder (#1700749)
- fixed double free in RAR decoder (#1700748)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-13" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-14" date="1579262400">- Fix patch application error</changelog>
</package>
<package pkgid="a960b4f72afcfc4e8e7ac92f5269ebbea0c49748d2db33357f82ccc7c77a274e" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2019.2.32" rel="76.el7_7"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2016.2.6-73" date="1462881600">- Use sln, not ln, to avoid the dependency on coreutils (rhbz#1328586)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-71" date="1484654400">- Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
- Use comments in extracted bundle files.
- Change packaging script to support empty legacy bundles.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-72" date="1489147200">- Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
  as a preparation to fix bugs in the interaction between p11-kit-trust and
  Mozilla applications, such as Firefox, Thunderbird etc.
- For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
- Require p11-kit 0.23.5
- Added an utility to help with comparing output of the trust dump command.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-73" date="1489147201">- No longer trust legacy CAs</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.14-71" date="1493380800">- Update to CKBI 2.14 from NSS 3.30.2</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.16-71" date="1506427200">- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
  Mozilla removed code signing trust from all CAs (rhbz#1472933)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.18-71" date="1509019200">- Update to CKBI 2.18 (pre-release snapshot)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.20-71" date="1511956800">- Update to CKBI 2.20 from NSS 3.34.1</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2019.2.32-76" date="1561118400">- Update to CKBI 2.32 from NSS 3.44
-   Removing:
-   # Certificate "Visa eCommerce Root"
-   # Certificate "AC Raiz Certicamara S.A."
-   # Certificate "TC TrustCenter Class 3 CA II"
-   # Certificate "ComSign CA"
-   # Certificate "S-TRUST Universal Root CA"
-   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
-   # Certificate "Certplus Root CA G1"
-   # Certificate "Certplus Root CA G2"
-   # Certificate "OpenTrust Root CA G1"
-   # Certificate "OpenTrust Root CA G2"
-   # Certificate "OpenTrust Root CA G3"
-  Adding:
-   # Certificate "GlobalSign Root CA - R6"
-   # Certificate "OISTE WISeKey Global Root GC CA"
-   # Certificate "GTS Root R1"
-   # Certificate "GTS Root R2"
-   # Certificate "GTS Root R3"
-   # Certificate "GTS Root R4"
-   # Certificate "UCA Global G2 Root"
-   # Certificate "UCA Extended Validation Root"
-   # Certificate "Certigna Root CA"
-   # Certificate "emSign Root CA - G1"
-   # Certificate "emSign ECC Root CA - G3"
-   # Certificate "emSign Root CA - C1"
-   # Certificate "emSign ECC Root CA - C3"
-   # Certificate "Hongkong Post Root CA 3"</changelog>
</package>
<package pkgid="3c34f5ba64b70d24e95d343f72e54890151badb8fe8e1fa24fdf4e61ed9002dd" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2019.2.32" rel="76.el7_7"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2016.2.6-73" date="1462881600">- Use sln, not ln, to avoid the dependency on coreutils (rhbz#1328586)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-71" date="1484654400">- Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
- Use comments in extracted bundle files.
- Change packaging script to support empty legacy bundles.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-72" date="1489147200">- Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
  as a preparation to fix bugs in the interaction between p11-kit-trust and
  Mozilla applications, such as Firefox, Thunderbird etc.
- For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
- Require p11-kit 0.23.5
- Added an utility to help with comparing output of the trust dump command.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-73" date="1489147201">- No longer trust legacy CAs</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.14-71" date="1493380800">- Update to CKBI 2.14 from NSS 3.30.2</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.16-71" date="1506427200">- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
  Mozilla removed code signing trust from all CAs (rhbz#1472933)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.18-71" date="1509019200">- Update to CKBI 2.18 (pre-release snapshot)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.20-71" date="1511956800">- Update to CKBI 2.20 from NSS 3.34.1</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2019.2.32-76" date="1561118400">- Update to CKBI 2.32 from NSS 3.44
-   Removing:
-   # Certificate "Visa eCommerce Root"
-   # Certificate "AC Raiz Certicamara S.A."
-   # Certificate "TC TrustCenter Class 3 CA II"
-   # Certificate "ComSign CA"
-   # Certificate "S-TRUST Universal Root CA"
-   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
-   # Certificate "Certplus Root CA G1"
-   # Certificate "Certplus Root CA G2"
-   # Certificate "OpenTrust Root CA G1"
-   # Certificate "OpenTrust Root CA G2"
-   # Certificate "OpenTrust Root CA G3"
-  Adding:
-   # Certificate "GlobalSign Root CA - R6"
-   # Certificate "OISTE WISeKey Global Root GC CA"
-   # Certificate "GTS Root R1"
-   # Certificate "GTS Root R2"
-   # Certificate "GTS Root R3"
-   # Certificate "GTS Root R4"
-   # Certificate "UCA Global G2 Root"
-   # Certificate "UCA Extended Validation Root"
-   # Certificate "Certigna Root CA"
-   # Certificate "emSign Root CA - G1"
-   # Certificate "emSign ECC Root CA - G3"
-   # Certificate "emSign Root CA - C1"
-   # Certificate "emSign ECC Root CA - C3"
-   # Certificate "Hongkong Post Root CA 3"</changelog>
</package>
<package pkgid="9128fe86dbf32e4c9687165c437bad9bc159294388bb48ed1d2e8aeadadefc93" name="ca-certificates" arch="src">
  <version epoch="0" ver="2019.2.32" rel="76.el7_7"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2016.2.6-73" date="1462881600">- Use sln, not ln, to avoid the dependency on coreutils (rhbz#1328586)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-71" date="1484654400">- Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
- Use comments in extracted bundle files.
- Change packaging script to support empty legacy bundles.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-72" date="1489147200">- Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
  as a preparation to fix bugs in the interaction between p11-kit-trust and
  Mozilla applications, such as Firefox, Thunderbird etc.
- For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
- Require p11-kit 0.23.5
- Added an utility to help with comparing output of the trust dump command.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-73" date="1489147201">- No longer trust legacy CAs</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.14-71" date="1493380800">- Update to CKBI 2.14 from NSS 3.30.2</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.16-71" date="1506427200">- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
  Mozilla removed code signing trust from all CAs (rhbz#1472933)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.18-71" date="1509019200">- Update to CKBI 2.18 (pre-release snapshot)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.20-71" date="1511956800">- Update to CKBI 2.20 from NSS 3.34.1</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2019.2.32-76" date="1561118400">- Update to CKBI 2.32 from NSS 3.44
-   Removing:
-   # Certificate "Visa eCommerce Root"
-   # Certificate "AC Raiz Certicamara S.A."
-   # Certificate "TC TrustCenter Class 3 CA II"
-   # Certificate "ComSign CA"
-   # Certificate "S-TRUST Universal Root CA"
-   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
-   # Certificate "Certplus Root CA G1"
-   # Certificate "Certplus Root CA G2"
-   # Certificate "OpenTrust Root CA G1"
-   # Certificate "OpenTrust Root CA G2"
-   # Certificate "OpenTrust Root CA G3"
-  Adding:
-   # Certificate "GlobalSign Root CA - R6"
-   # Certificate "OISTE WISeKey Global Root GC CA"
-   # Certificate "GTS Root R1"
-   # Certificate "GTS Root R2"
-   # Certificate "GTS Root R3"
-   # Certificate "GTS Root R4"
-   # Certificate "UCA Global G2 Root"
-   # Certificate "UCA Extended Validation Root"
-   # Certificate "Certigna Root CA"
-   # Certificate "emSign Root CA - G1"
-   # Certificate "emSign ECC Root CA - G3"
-   # Certificate "emSign Root CA - C1"
-   # Certificate "emSign ECC Root CA - C3"
-   # Certificate "Hongkong Post Root CA 3"</changelog>
</package>
<package pkgid="de9ba6f485dcbf07710229fb7c89d86ec9a70fec13a5c806e72169d9208f3a2d" name="ca-certificates" arch="src">
  <version epoch="0" ver="2019.2.32" rel="76.el7_7"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2016.2.6-73" date="1462881600">- Use sln, not ln, to avoid the dependency on coreutils (rhbz#1328586)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-71" date="1484654400">- Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
- Use comments in extracted bundle files.
- Change packaging script to support empty legacy bundles.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-72" date="1489147200">- Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
  as a preparation to fix bugs in the interaction between p11-kit-trust and
  Mozilla applications, such as Firefox, Thunderbird etc.
- For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
- Require p11-kit 0.23.5
- Added an utility to help with comparing output of the trust dump command.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-73" date="1489147201">- No longer trust legacy CAs</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.14-71" date="1493380800">- Update to CKBI 2.14 from NSS 3.30.2</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.16-71" date="1506427200">- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
  Mozilla removed code signing trust from all CAs (rhbz#1472933)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.18-71" date="1509019200">- Update to CKBI 2.18 (pre-release snapshot)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.20-71" date="1511956800">- Update to CKBI 2.20 from NSS 3.34.1</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2019.2.32-76" date="1561118400">- Update to CKBI 2.32 from NSS 3.44
-   Removing:
-   # Certificate "Visa eCommerce Root"
-   # Certificate "AC Raiz Certicamara S.A."
-   # Certificate "TC TrustCenter Class 3 CA II"
-   # Certificate "ComSign CA"
-   # Certificate "S-TRUST Universal Root CA"
-   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
-   # Certificate "Certplus Root CA G1"
-   # Certificate "Certplus Root CA G2"
-   # Certificate "OpenTrust Root CA G1"
-   # Certificate "OpenTrust Root CA G2"
-   # Certificate "OpenTrust Root CA G3"
-  Adding:
-   # Certificate "GlobalSign Root CA - R6"
-   # Certificate "OISTE WISeKey Global Root GC CA"
-   # Certificate "GTS Root R1"
-   # Certificate "GTS Root R2"
-   # Certificate "GTS Root R3"
-   # Certificate "GTS Root R4"
-   # Certificate "UCA Global G2 Root"
-   # Certificate "UCA Extended Validation Root"
-   # Certificate "Certigna Root CA"
-   # Certificate "emSign Root CA - G1"
-   # Certificate "emSign ECC Root CA - G3"
-   # Certificate "emSign Root CA - C1"
-   # Certificate "emSign ECC Root CA - C3"
-   # Certificate "Hongkong Post Root CA 3"</changelog>
</package>
<package pkgid="a310b1e8ed9225e3f6aa3809fa82a3fe0960ef9f6bc0a754458f9a8ad4a393eb" name="cmirror" arch="i686">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="a5f9b865db8ba66ceac174fb4b9f2bf84a4660089a64d5cf405199712d729a08" name="cmirror" arch="x86_64">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="e08c82c4ec64d59de45fb57deab0f0adbf80346f95fd8fdf62ca79caa27b77bb" name="cmirror-standalone" arch="i686">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="ed44f5635999b8fd5e6812ca689f6e7726c5554d81ef1d2f2395d72f3d34779d" name="cmirror-standalone" arch="x86_64">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="ef72916120ec8107646ef9ad75298cb44aeaed088575beb15760d83b2ed2ec98" name="conntrack-tools" arch="i686">
  <version epoch="0" ver="1.4.4" rel="5.el7_7.2"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.2-8" date="1439899200">- Resolves: rhbz#CVE-2015-6496
- Fold in upstream patches since 1.4.2 release up to git 900d7e8
- Fold in upstream patch set of 2015-08-18 for coverity issues</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.2-9" date="1440158400">- Resolves: rhbz#1255578 conntrackd could neither be started nor be stopped</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.3-1" date="1471003200">- Resolves: rhbz#1351701 conntrackd -d throws "ERROR: Helper support is disabled"</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-1" date="1488542400">- Resolves: rhbz#1425552 conntrack does not support Ipv6 NAT</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-2" date="1489665600">- Resolves: rhbz#1425552 (conntrack cmd was missing IPv6 support as well)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-3" date="1491220800">- Resolves: rhbz#1425552 (explicitely Require: libnetfilter_conntrack &gt;= 1.0.6 as it is same .so version)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-4" date="1535112000">- Resolves: rhbz#1578059 Greatest NVR version of conntrack-tools for ppc64le and x86_64 are different</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5" date="1553688000">- Add git commit info to IPv6 NAT support patch
- Backport: conntrackd: helpers: dhcpv6: Fix potential array overrun
- Backport: nfct: Drop dead code in nfct_timeout_parse_params()
- Backport: src: Fix for implicit-fallthrough warnings</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5.1" date="1567771200">- conntrack: Fix CIDR to mask conversion on Big Endian</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5.2" date="1568116800">- nfct: helper: Fix NFCTH_ATTR_PROTO_L4NUM size</changelog>
</package>
<package pkgid="425765d82103cee0a685ad25ab066df9a53bf998d5acf5b215d3b3f5d8685805" name="conntrack-tools" arch="src">
  <version epoch="0" ver="1.4.4" rel="5.el7_7.2"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.2-8" date="1439899200">- Resolves: rhbz#CVE-2015-6496
- Fold in upstream patches since 1.4.2 release up to git 900d7e8
- Fold in upstream patch set of 2015-08-18 for coverity issues</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.2-9" date="1440158400">- Resolves: rhbz#1255578 conntrackd could neither be started nor be stopped</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.3-1" date="1471003200">- Resolves: rhbz#1351701 conntrackd -d throws "ERROR: Helper support is disabled"</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-1" date="1488542400">- Resolves: rhbz#1425552 conntrack does not support Ipv6 NAT</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-2" date="1489665600">- Resolves: rhbz#1425552 (conntrack cmd was missing IPv6 support as well)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-3" date="1491220800">- Resolves: rhbz#1425552 (explicitely Require: libnetfilter_conntrack &gt;= 1.0.6 as it is same .so version)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-4" date="1535112000">- Resolves: rhbz#1578059 Greatest NVR version of conntrack-tools for ppc64le and x86_64 are different</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5" date="1553688000">- Add git commit info to IPv6 NAT support patch
- Backport: conntrackd: helpers: dhcpv6: Fix potential array overrun
- Backport: nfct: Drop dead code in nfct_timeout_parse_params()
- Backport: src: Fix for implicit-fallthrough warnings</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5.1" date="1567771200">- conntrack: Fix CIDR to mask conversion on Big Endian</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5.2" date="1568116800">- nfct: helper: Fix NFCTH_ATTR_PROTO_L4NUM size</changelog>
</package>
<package pkgid="8a11e0f02d202c85c1551f47307d476b3f968b5aad9e62b397b49c365ee97413" name="conntrack-tools" arch="src">
  <version epoch="0" ver="1.4.4" rel="5.el7_7.2"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.2-8" date="1439899200">- Resolves: rhbz#CVE-2015-6496
- Fold in upstream patches since 1.4.2 release up to git 900d7e8
- Fold in upstream patch set of 2015-08-18 for coverity issues</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.2-9" date="1440158400">- Resolves: rhbz#1255578 conntrackd could neither be started nor be stopped</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.3-1" date="1471003200">- Resolves: rhbz#1351701 conntrackd -d throws "ERROR: Helper support is disabled"</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-1" date="1488542400">- Resolves: rhbz#1425552 conntrack does not support Ipv6 NAT</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-2" date="1489665600">- Resolves: rhbz#1425552 (conntrack cmd was missing IPv6 support as well)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-3" date="1491220800">- Resolves: rhbz#1425552 (explicitely Require: libnetfilter_conntrack &gt;= 1.0.6 as it is same .so version)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-4" date="1535112000">- Resolves: rhbz#1578059 Greatest NVR version of conntrack-tools for ppc64le and x86_64 are different</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5" date="1553688000">- Add git commit info to IPv6 NAT support patch
- Backport: conntrackd: helpers: dhcpv6: Fix potential array overrun
- Backport: nfct: Drop dead code in nfct_timeout_parse_params()
- Backport: src: Fix for implicit-fallthrough warnings</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5.1" date="1567771200">- conntrack: Fix CIDR to mask conversion on Big Endian</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5.2" date="1568116800">- nfct: helper: Fix NFCTH_ATTR_PROTO_L4NUM size</changelog>
</package>
<package pkgid="4657d137cd1f8eef4f5406cb314f3368511511f75eeabfb3f895c9821f2b5bde" name="conntrack-tools" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="5.el7_7.2"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.2-8" date="1439899200">- Resolves: rhbz#CVE-2015-6496
- Fold in upstream patches since 1.4.2 release up to git 900d7e8
- Fold in upstream patch set of 2015-08-18 for coverity issues</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.2-9" date="1440158400">- Resolves: rhbz#1255578 conntrackd could neither be started nor be stopped</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.3-1" date="1471003200">- Resolves: rhbz#1351701 conntrackd -d throws "ERROR: Helper support is disabled"</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-1" date="1488542400">- Resolves: rhbz#1425552 conntrack does not support Ipv6 NAT</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-2" date="1489665600">- Resolves: rhbz#1425552 (conntrack cmd was missing IPv6 support as well)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-3" date="1491220800">- Resolves: rhbz#1425552 (explicitely Require: libnetfilter_conntrack &gt;= 1.0.6 as it is same .so version)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-4" date="1535112000">- Resolves: rhbz#1578059 Greatest NVR version of conntrack-tools for ppc64le and x86_64 are different</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5" date="1553688000">- Add git commit info to IPv6 NAT support patch
- Backport: conntrackd: helpers: dhcpv6: Fix potential array overrun
- Backport: nfct: Drop dead code in nfct_timeout_parse_params()
- Backport: src: Fix for implicit-fallthrough warnings</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5.1" date="1567771200">- conntrack: Fix CIDR to mask conversion on Big Endian</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5.2" date="1568116800">- nfct: helper: Fix NFCTH_ATTR_PROTO_L4NUM size</changelog>
</package>
<package pkgid="0636cee7b5bc1442ab056cd4e9b0bf3d5210c99b8559dd6c8007cd7828fa757f" name="conntrack-tools-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.4" rel="5.el7_7.2"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.2-8" date="1439899200">- Resolves: rhbz#CVE-2015-6496
- Fold in upstream patches since 1.4.2 release up to git 900d7e8
- Fold in upstream patch set of 2015-08-18 for coverity issues</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.2-9" date="1440158400">- Resolves: rhbz#1255578 conntrackd could neither be started nor be stopped</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.3-1" date="1471003200">- Resolves: rhbz#1351701 conntrackd -d throws "ERROR: Helper support is disabled"</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-1" date="1488542400">- Resolves: rhbz#1425552 conntrack does not support Ipv6 NAT</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-2" date="1489665600">- Resolves: rhbz#1425552 (conntrack cmd was missing IPv6 support as well)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-3" date="1491220800">- Resolves: rhbz#1425552 (explicitely Require: libnetfilter_conntrack &gt;= 1.0.6 as it is same .so version)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-4" date="1535112000">- Resolves: rhbz#1578059 Greatest NVR version of conntrack-tools for ppc64le and x86_64 are different</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5" date="1553688000">- Add git commit info to IPv6 NAT support patch
- Backport: conntrackd: helpers: dhcpv6: Fix potential array overrun
- Backport: nfct: Drop dead code in nfct_timeout_parse_params()
- Backport: src: Fix for implicit-fallthrough warnings</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5.1" date="1567771200">- conntrack: Fix CIDR to mask conversion on Big Endian</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5.2" date="1568116800">- nfct: helper: Fix NFCTH_ATTR_PROTO_L4NUM size</changelog>
</package>
<package pkgid="9d7ee3ed942299f2c7a856f6aac861711d2f6173baf639ac8f8115a43863fef7" name="conntrack-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="5.el7_7.2"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.2-8" date="1439899200">- Resolves: rhbz#CVE-2015-6496
- Fold in upstream patches since 1.4.2 release up to git 900d7e8
- Fold in upstream patch set of 2015-08-18 for coverity issues</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.2-9" date="1440158400">- Resolves: rhbz#1255578 conntrackd could neither be started nor be stopped</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.3-1" date="1471003200">- Resolves: rhbz#1351701 conntrackd -d throws "ERROR: Helper support is disabled"</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-1" date="1488542400">- Resolves: rhbz#1425552 conntrack does not support Ipv6 NAT</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-2" date="1489665600">- Resolves: rhbz#1425552 (conntrack cmd was missing IPv6 support as well)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-3" date="1491220800">- Resolves: rhbz#1425552 (explicitely Require: libnetfilter_conntrack &gt;= 1.0.6 as it is same .so version)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.4.4-4" date="1535112000">- Resolves: rhbz#1578059 Greatest NVR version of conntrack-tools for ppc64le and x86_64 are different</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5" date="1553688000">- Add git commit info to IPv6 NAT support patch
- Backport: conntrackd: helpers: dhcpv6: Fix potential array overrun
- Backport: nfct: Drop dead code in nfct_timeout_parse_params()
- Backport: src: Fix for implicit-fallthrough warnings</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5.1" date="1567771200">- conntrack: Fix CIDR to mask conversion on Big Endian</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.4-5.2" date="1568116800">- nfct: helper: Fix NFCTH_ATTR_PROTO_L4NUM size</changelog>
</package>
<package pkgid="50a75a4f9337a5ed47858c42f5036e3376939ee7f1cbb07c50a0388625215bc0" name="corosync" arch="i686">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="62d955314bc404c1bf50f9bebf0446d0d3fc691eb8706654732a85d24eb85814" name="corosync" arch="src">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="ecb6fd01b908a3dfaa71f4b224f25f125a24cf211caaaae8df9b323d6fa063f7" name="corosync" arch="src">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="8b4e0d5aa47552c4b6fb8b819ed6a8f8ceb67e6b7a9830473c781df480a2d076" name="corosync" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="2e031b7b2633b81b4209cba354d56d40f9d8c601fa4efc2a857bacef9e95947c" name="corosync-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="a04ed75c7e0b8b44ef553482f4f6ab02aff88801cf744d42ab7ad1108624f0a6" name="corosync-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="41ddb0e63c20b5059259c3a04e990d726c6b3cfabb260a1c9dae2e6caec2a81b" name="corosync-qdevice" arch="i686">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="717c36d438cb63aa4076495a574bd110fa64a9bf6bdaddcda1b6eccdf241eea6" name="corosync-qdevice" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="a328bf56c8943a3acdfe14ea15abe4f495e8b4792f08696051404b586c731a51" name="corosync-qnetd" arch="i686">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="9bbc48af5b3fba81688825a47562ff2fcb1e3e7ff34998b0b21859a761fd57cf" name="corosync-qnetd" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="e61c6e8b2b3a2196865da313a3719c92c021a16836ce509c382e7f81aef39d8f" name="corosynclib" arch="i686">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="91cdb97f11585148c1600890a3a29c7c1dc42ed7f08408b34302639886abc10b" name="corosynclib" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="b4fb2864b5ba1ffa8f270798bab4a4dc1a1b0275c70ebdb774808816c0d8e275" name="corosynclib-devel" arch="i686">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="4f2c13ec61231da2150d183c06ea80115e074a68e07c71e4e40bd57179f57467" name="corosynclib-devel" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="cd6e835a39e4510e86515815960cfe20f5d6265c2b1539fd5cdec704c4b35959" name="ctdb" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="b1d4666eb36d97c25dcac6820bb1274a75ece04f052c052c2707fd7599e3aae3" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="04b9287f3f0c33e0c956a79340d8d92ad043e28b81934d83b2dec5fcb8deb07b" name="ctdb-tests" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="7d002e43afbfcf71dad477b9a43cf68aacd7ed34d924d64f72cfa44ad464e315" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="e605c57b05029e564e42aed2665a52ab2c406222b42f7cd8937bc8567ba124fa" name="cups-filters" arch="i686">
  <version epoch="0" ver="1.0.35" rel="26.el7_7.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-17" date="1434456000">- Build against newer poppler (bug #1217552).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-18" date="1434974400">- Fix segfault in texttopdf filter (bug #1194263).
- Improve cups-browsed efficiency (bug #1191691).
- Fetch printer descriptions with cups-browsed (bug #1223719).
- Fix cups-browsed "_" handling for printer names (bug #1167408).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-20" date="1435233600">- Improvements to cups-browsed efficiency patch (bug #1191691).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26.1" date="1574769600">- 1776400 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
</package>
<package pkgid="7666e95be0ac0d765a5542a1d4b0ef7380c08769213c70438f4740bae371e8f3" name="cups-filters" arch="src">
  <version epoch="0" ver="1.0.35" rel="26.el7_7.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-17" date="1434456000">- Build against newer poppler (bug #1217552).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-18" date="1434974400">- Fix segfault in texttopdf filter (bug #1194263).
- Improve cups-browsed efficiency (bug #1191691).
- Fetch printer descriptions with cups-browsed (bug #1223719).
- Fix cups-browsed "_" handling for printer names (bug #1167408).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-20" date="1435233600">- Improvements to cups-browsed efficiency patch (bug #1191691).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26.1" date="1574769600">- 1776400 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
</package>
<package pkgid="19dd398f19c75b6ea0e12280582e489f3da2f73795c9c6a05cdef8e54b19e470" name="cups-filters" arch="src">
  <version epoch="0" ver="1.0.35" rel="26.el7_7.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-17" date="1434456000">- Build against newer poppler (bug #1217552).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-18" date="1434974400">- Fix segfault in texttopdf filter (bug #1194263).
- Improve cups-browsed efficiency (bug #1191691).
- Fetch printer descriptions with cups-browsed (bug #1223719).
- Fix cups-browsed "_" handling for printer names (bug #1167408).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-20" date="1435233600">- Improvements to cups-browsed efficiency patch (bug #1191691).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26.1" date="1574769600">- 1776400 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
</package>
<package pkgid="e6cd5752e9aa5e5b010c69fa8023015fa2934d5aa5e705b37cf6144c48e7cbee" name="cups-filters" arch="x86_64">
  <version epoch="0" ver="1.0.35" rel="26.el7_7.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-17" date="1434456000">- Build against newer poppler (bug #1217552).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-18" date="1434974400">- Fix segfault in texttopdf filter (bug #1194263).
- Improve cups-browsed efficiency (bug #1191691).
- Fetch printer descriptions with cups-browsed (bug #1223719).
- Fix cups-browsed "_" handling for printer names (bug #1167408).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-20" date="1435233600">- Improvements to cups-browsed efficiency patch (bug #1191691).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26.1" date="1574769600">- 1776400 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
</package>
<package pkgid="986de3331627b630f3c7fe8dbd94db86b73eda08f05d299030a40e02a112cdd7" name="cups-filters-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.35" rel="26.el7_7.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-17" date="1434456000">- Build against newer poppler (bug #1217552).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-18" date="1434974400">- Fix segfault in texttopdf filter (bug #1194263).
- Improve cups-browsed efficiency (bug #1191691).
- Fetch printer descriptions with cups-browsed (bug #1223719).
- Fix cups-browsed "_" handling for printer names (bug #1167408).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-20" date="1435233600">- Improvements to cups-browsed efficiency patch (bug #1191691).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26.1" date="1574769600">- 1776400 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
</package>
<package pkgid="ab853570b61def66ee323390540df9fde8bf0dfb70c40a10de59165f919a7892" name="cups-filters-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.35" rel="26.el7_7.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-17" date="1434456000">- Build against newer poppler (bug #1217552).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-18" date="1434974400">- Fix segfault in texttopdf filter (bug #1194263).
- Improve cups-browsed efficiency (bug #1191691).
- Fetch printer descriptions with cups-browsed (bug #1223719).
- Fix cups-browsed "_" handling for printer names (bug #1167408).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-20" date="1435233600">- Improvements to cups-browsed efficiency patch (bug #1191691).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26.1" date="1574769600">- 1776400 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
</package>
<package pkgid="a73cc9f20e6aa54c4515e8584926353e5f7ae56a061c3b9b710df65bc73d54f9" name="cups-filters-devel" arch="i686">
  <version epoch="0" ver="1.0.35" rel="26.el7_7.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-17" date="1434456000">- Build against newer poppler (bug #1217552).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-18" date="1434974400">- Fix segfault in texttopdf filter (bug #1194263).
- Improve cups-browsed efficiency (bug #1191691).
- Fetch printer descriptions with cups-browsed (bug #1223719).
- Fix cups-browsed "_" handling for printer names (bug #1167408).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-20" date="1435233600">- Improvements to cups-browsed efficiency patch (bug #1191691).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26.1" date="1574769600">- 1776400 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
</package>
<package pkgid="b07eaa82bf8e75a917a5ebe1585bba4b47272ddd1ce3b75c256c17e9b837df51" name="cups-filters-devel" arch="x86_64">
  <version epoch="0" ver="1.0.35" rel="26.el7_7.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-17" date="1434456000">- Build against newer poppler (bug #1217552).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-18" date="1434974400">- Fix segfault in texttopdf filter (bug #1194263).
- Improve cups-browsed efficiency (bug #1191691).
- Fetch printer descriptions with cups-browsed (bug #1223719).
- Fix cups-browsed "_" handling for printer names (bug #1167408).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-20" date="1435233600">- Improvements to cups-browsed efficiency patch (bug #1191691).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26.1" date="1574769600">- 1776400 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
</package>
<package pkgid="9228bf9c489e10d762af5859ac4a67318a85ad375c559e5296bab9336228208a" name="cups-filters-libs" arch="i686">
  <version epoch="0" ver="1.0.35" rel="26.el7_7.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-17" date="1434456000">- Build against newer poppler (bug #1217552).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-18" date="1434974400">- Fix segfault in texttopdf filter (bug #1194263).
- Improve cups-browsed efficiency (bug #1191691).
- Fetch printer descriptions with cups-browsed (bug #1223719).
- Fix cups-browsed "_" handling for printer names (bug #1167408).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-20" date="1435233600">- Improvements to cups-browsed efficiency patch (bug #1191691).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26.1" date="1574769600">- 1776400 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
</package>
<package pkgid="f8b6f79e18999d56e105ba75ad830c18558b76ee86c699c9eadf5592dca13fb6" name="cups-filters-libs" arch="x86_64">
  <version epoch="0" ver="1.0.35" rel="26.el7_7.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-17" date="1434456000">- Build against newer poppler (bug #1217552).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-18" date="1434974400">- Fix segfault in texttopdf filter (bug #1194263).
- Improve cups-browsed efficiency (bug #1191691).
- Fetch printer descriptions with cups-browsed (bug #1223719).
- Fix cups-browsed "_" handling for printer names (bug #1167408).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-20" date="1435233600">- Improvements to cups-browsed efficiency patch (bug #1191691).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26.1" date="1574769600">- 1776400 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
</package>
<package pkgid="53a6d2be0d509d5ac64eac861b7eb19b4d65a5c04b6145fc5254c7c1aaed3807" name="curl" arch="i686">
  <version epoch="0" ver="7.29.0" rel="54.el7_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-46" date="1512993600">- reset authentication state when HTTP transfer is done (#1511523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-47" date="1519992000">- make NSS deallocate PKCS #11 objects early enough (#1510247)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-48" date="1527681600">- fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-49" date="1528286400">- make curl --speed-limit work with TFTP (#1584750)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-50" date="1528372800">- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54.el7_7.1" date="1570449600">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
</package>
<package pkgid="386fa594a423c6575f599bf00d11f6d1edf84bde3715f1e25df83ce7c5377b04" name="curl" arch="src">
  <version epoch="0" ver="7.29.0" rel="54.el7_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-46" date="1512993600">- reset authentication state when HTTP transfer is done (#1511523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-47" date="1519992000">- make NSS deallocate PKCS #11 objects early enough (#1510247)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-48" date="1527681600">- fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-49" date="1528286400">- make curl --speed-limit work with TFTP (#1584750)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-50" date="1528372800">- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54.el7_7.1" date="1570449600">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
</package>
<package pkgid="2facd7ae0ca0cee671d86aab13d7215cfaa3e204f8e0d2f6c530272fb9b8230f" name="curl" arch="src">
  <version epoch="0" ver="7.29.0" rel="54.el7_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-46" date="1512993600">- reset authentication state when HTTP transfer is done (#1511523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-47" date="1519992000">- make NSS deallocate PKCS #11 objects early enough (#1510247)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-48" date="1527681600">- fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-49" date="1528286400">- make curl --speed-limit work with TFTP (#1584750)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-50" date="1528372800">- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54.el7_7.1" date="1570449600">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
</package>
<package pkgid="0a8e924c0239eedc8119a602400fd106ef55f26011426021827cadc12a44b7c1" name="curl" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="54.el7_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-46" date="1512993600">- reset authentication state when HTTP transfer is done (#1511523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-47" date="1519992000">- make NSS deallocate PKCS #11 objects early enough (#1510247)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-48" date="1527681600">- fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-49" date="1528286400">- make curl --speed-limit work with TFTP (#1584750)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-50" date="1528372800">- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54.el7_7.1" date="1570449600">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
</package>
<package pkgid="bc4dc3af024041dbe86a910ec23dafb5fcb432ed3fd8d59ed79eff389ecca416" name="curl-debuginfo" arch="i686">
  <version epoch="0" ver="7.29.0" rel="54.el7_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-46" date="1512993600">- reset authentication state when HTTP transfer is done (#1511523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-47" date="1519992000">- make NSS deallocate PKCS #11 objects early enough (#1510247)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-48" date="1527681600">- fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-49" date="1528286400">- make curl --speed-limit work with TFTP (#1584750)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-50" date="1528372800">- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54.el7_7.1" date="1570449600">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
</package>
<package pkgid="8946f95eb2e709d4f349f20d8b916f4662055f069447f56f89c7b7b1ccab4d20" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="54.el7_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-46" date="1512993600">- reset authentication state when HTTP transfer is done (#1511523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-47" date="1519992000">- make NSS deallocate PKCS #11 objects early enough (#1510247)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-48" date="1527681600">- fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-49" date="1528286400">- make curl --speed-limit work with TFTP (#1584750)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-50" date="1528372800">- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54.el7_7.1" date="1570449600">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
</package>
<package pkgid="0ad54500059f930f782d09457e0f955e09f0d9fcead7875620eff2533f7e2550" name="device-mapper" arch="i686">
  <version epoch="7" ver="1.02.158" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="bcfb9f5f13813fa9cda029dab00715258dc5cf00127105b9a3383c5975f47ed4" name="device-mapper" arch="x86_64">
  <version epoch="7" ver="1.02.158" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="4748a1267603497e5d5b1e49f7dab92c6228879267df56ad000032786921934b" name="device-mapper-devel" arch="i686">
  <version epoch="7" ver="1.02.158" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="0bea6710af262707fcbf8f76154e762c7b385b57485c4d032d5b54edea93bba5" name="device-mapper-devel" arch="x86_64">
  <version epoch="7" ver="1.02.158" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="4dcedb3cd81278023b5ef49a1d00190b490dc75a281c242251e3cfaf260d04e1" name="device-mapper-event" arch="i686">
  <version epoch="7" ver="1.02.158" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="5fb3d2d52bbf3eda08db40ff7803be551413159795cf0b734cc40fc1455fe590" name="device-mapper-event" arch="x86_64">
  <version epoch="7" ver="1.02.158" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="3715e7f47a1a6dd4b12d16d66e95402d1d3b0bdcd5e22e2a24862b197dc3c755" name="device-mapper-event-devel" arch="i686">
  <version epoch="7" ver="1.02.158" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="49215f9da8016848855e139df90ea13b358c1cb89497a69cba8fb3c55d5de213" name="device-mapper-event-devel" arch="x86_64">
  <version epoch="7" ver="1.02.158" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="667b8dc2cf7f3570a5db22ea98b8b41f0c46d62a27815406a347a63df619adaf" name="device-mapper-event-libs" arch="i686">
  <version epoch="7" ver="1.02.158" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="ff45c958e031fe7e5ed3f88bd949525628834848e2b4f960f6e8faa74f333857" name="device-mapper-event-libs" arch="x86_64">
  <version epoch="7" ver="1.02.158" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="96e3f5eac63822cfee8dd36ec10e48752c78adb9a7f9478b350b0f6a560a265a" name="device-mapper-libs" arch="i686">
  <version epoch="7" ver="1.02.158" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="377f5af1d1b993b4b84516863c004b7c466dc913bfd9379c19f1b3dc2c911240" name="device-mapper-libs" arch="x86_64">
  <version epoch="7" ver="1.02.158" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="6efa032cdc45c1d32181d90b829b48f2e9034389b06bd1352e663dc56d476eac" name="dnf-plugin-subscription-manager" arch="i686">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="3856f950fd6514ed6bdff47069152216091d92440eaea7a496179aa5112f81df" name="dnf-plugin-subscription-manager" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="e1a7599b00797debda4ee6f59aafbdb5274d61e984324adb562afec3e4747518" name="dnsmasq" arch="i686">
  <version epoch="0" ver="2.76" rel="10.el7_7.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-3" date="1490356800">- Log output of dhcp-script (#1188259)
- Log format errors in dhcp-script init</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-4" date="1505390400">- Fix possible stack corruption on 32-bit architectures (#1188259)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-5" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-6" date="1506513600">- Small correction of CVE-2017-14491</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 2.76-7" date="1525867200">- Resolves: #1474515 dhcp-agent dnsmasq max files</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10.1" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
</package>
<package pkgid="78616da3bfa4a4ebbb59d54a2ca43eb5eb99362ada20a80c2a1b5e92050e4e54" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.76" rel="10.el7_7.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-3" date="1490356800">- Log output of dhcp-script (#1188259)
- Log format errors in dhcp-script init</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-4" date="1505390400">- Fix possible stack corruption on 32-bit architectures (#1188259)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-5" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-6" date="1506513600">- Small correction of CVE-2017-14491</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 2.76-7" date="1525867200">- Resolves: #1474515 dhcp-agent dnsmasq max files</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10.1" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
</package>
<package pkgid="4d9c74f8d08af4a1ba90d9faba7a6604d8900f1b8b53f85df170f70c63bbda6e" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.76" rel="10.el7_7.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-3" date="1490356800">- Log output of dhcp-script (#1188259)
- Log format errors in dhcp-script init</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-4" date="1505390400">- Fix possible stack corruption on 32-bit architectures (#1188259)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-5" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-6" date="1506513600">- Small correction of CVE-2017-14491</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 2.76-7" date="1525867200">- Resolves: #1474515 dhcp-agent dnsmasq max files</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10.1" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
</package>
<package pkgid="653d87f96b75b94dfc61f5616f0c5dd4018e56199d65b719f5e37c24aa779abf" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.76" rel="10.el7_7.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-3" date="1490356800">- Log output of dhcp-script (#1188259)
- Log format errors in dhcp-script init</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-4" date="1505390400">- Fix possible stack corruption on 32-bit architectures (#1188259)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-5" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-6" date="1506513600">- Small correction of CVE-2017-14491</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 2.76-7" date="1525867200">- Resolves: #1474515 dhcp-agent dnsmasq max files</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10.1" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
</package>
<package pkgid="4dc8cbf0fc8460d0385205c03b37ce9ce90794153bf7e760423de3fd0ac13816" name="dnsmasq-debuginfo" arch="i686">
  <version epoch="0" ver="2.76" rel="10.el7_7.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-3" date="1490356800">- Log output of dhcp-script (#1188259)
- Log format errors in dhcp-script init</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-4" date="1505390400">- Fix possible stack corruption on 32-bit architectures (#1188259)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-5" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-6" date="1506513600">- Small correction of CVE-2017-14491</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 2.76-7" date="1525867200">- Resolves: #1474515 dhcp-agent dnsmasq max files</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10.1" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
</package>
<package pkgid="7adb8dd658f92a6b4273dee2fc8db86b022da98442b42cf9c5aa22b04fa88a93" name="dnsmasq-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.76" rel="10.el7_7.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-3" date="1490356800">- Log output of dhcp-script (#1188259)
- Log format errors in dhcp-script init</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-4" date="1505390400">- Fix possible stack corruption on 32-bit architectures (#1188259)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-5" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-6" date="1506513600">- Small correction of CVE-2017-14491</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 2.76-7" date="1525867200">- Resolves: #1474515 dhcp-agent dnsmasq max files</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10.1" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
</package>
<package pkgid="5b6f6cf32c7d87ac1e0e461d9686267278977af372e24f2596698271a941ccd2" name="dnsmasq-utils" arch="i686">
  <version epoch="0" ver="2.76" rel="10.el7_7.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-3" date="1490356800">- Log output of dhcp-script (#1188259)
- Log format errors in dhcp-script init</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-4" date="1505390400">- Fix possible stack corruption on 32-bit architectures (#1188259)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-5" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-6" date="1506513600">- Small correction of CVE-2017-14491</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 2.76-7" date="1525867200">- Resolves: #1474515 dhcp-agent dnsmasq max files</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10.1" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
</package>
<package pkgid="15fea52fc3593f445856d3a742e56203988c226c24258d19b30f6a50a66079f1" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.76" rel="10.el7_7.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-3" date="1490356800">- Log output of dhcp-script (#1188259)
- Log format errors in dhcp-script init</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-4" date="1505390400">- Fix possible stack corruption on 32-bit architectures (#1188259)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-5" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-6" date="1506513600">- Small correction of CVE-2017-14491</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 2.76-7" date="1525867200">- Resolves: #1474515 dhcp-agent dnsmasq max files</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10.1" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
</package>
<package pkgid="c80b05937d6891fe0a6ea94faa83833d008a8cb0b8d8bc9c852e705fa67583e7" name="dovecot" arch="i686">
  <version epoch="1" ver="2.2.36" rel="3.el7_7.1"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:2.2.10-3" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.2.10-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-5" date="1402488000">- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-6" date="1465214400">- add devel sub-package (#1122676)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-7" date="1465473600">- prevent warning messages from %post section if selinux-policy is
  not installed (yet) (#1057522)
- compile with xz compression support enabled (#1176214)
- fix crash in sieve script compilation (#1177852)
- wait with start after network-online target (#1209006)
- build with tcp wrappers enabled (#1229164)
- fixed userdb extra fields handling in passdb failure (#1234868)
- fix valgrind option detection for make check (#1249625)
- first valid regular user id is 1000 (#1280433)
- fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
- fixed header parsing when there were multiple same header names (#1224496)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-8" date="1490097600">- do not iterate over users outside of first/last_valid_gid range (#1280436)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-1" date="1528804800">- dovecot updated to 2.2.36, pigeonhole to 0.4.24
- fixed dsync not replicating sieve scripts (#1419426)
- fix plugins incorrectly reporting epipe errors(#1489943)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-2" date="1532952000">- fix defaut permissions of gost run files</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3" date="1537358400">- fix global ACL directory configuration search path (#1630380)
- update first/last_valid_gid range patch (#1630409)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3.1" date="1568289600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1751383)</changelog>
</package>
<package pkgid="0c40c0785ced842a466bfe7020a7fd374298d79b05acf2e6a014a0b597608c94" name="dovecot" arch="src">
  <version epoch="1" ver="2.2.36" rel="3.el7_7.1"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:2.2.10-3" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.2.10-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-5" date="1402488000">- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-6" date="1465214400">- add devel sub-package (#1122676)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-7" date="1465473600">- prevent warning messages from %post section if selinux-policy is
  not installed (yet) (#1057522)
- compile with xz compression support enabled (#1176214)
- fix crash in sieve script compilation (#1177852)
- wait with start after network-online target (#1209006)
- build with tcp wrappers enabled (#1229164)
- fixed userdb extra fields handling in passdb failure (#1234868)
- fix valgrind option detection for make check (#1249625)
- first valid regular user id is 1000 (#1280433)
- fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
- fixed header parsing when there were multiple same header names (#1224496)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-8" date="1490097600">- do not iterate over users outside of first/last_valid_gid range (#1280436)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-1" date="1528804800">- dovecot updated to 2.2.36, pigeonhole to 0.4.24
- fixed dsync not replicating sieve scripts (#1419426)
- fix plugins incorrectly reporting epipe errors(#1489943)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-2" date="1532952000">- fix defaut permissions of gost run files</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3" date="1537358400">- fix global ACL directory configuration search path (#1630380)
- update first/last_valid_gid range patch (#1630409)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3.1" date="1568289600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1751383)</changelog>
</package>
<package pkgid="4869c78cd502d3d4b94b79f12cdada7af0579f08c5dc6ceaa8c5841ad349b9cf" name="dovecot" arch="src">
  <version epoch="1" ver="2.2.36" rel="3.el7_7.1"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:2.2.10-3" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.2.10-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-5" date="1402488000">- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-6" date="1465214400">- add devel sub-package (#1122676)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-7" date="1465473600">- prevent warning messages from %post section if selinux-policy is
  not installed (yet) (#1057522)
- compile with xz compression support enabled (#1176214)
- fix crash in sieve script compilation (#1177852)
- wait with start after network-online target (#1209006)
- build with tcp wrappers enabled (#1229164)
- fixed userdb extra fields handling in passdb failure (#1234868)
- fix valgrind option detection for make check (#1249625)
- first valid regular user id is 1000 (#1280433)
- fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
- fixed header parsing when there were multiple same header names (#1224496)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-8" date="1490097600">- do not iterate over users outside of first/last_valid_gid range (#1280436)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-1" date="1528804800">- dovecot updated to 2.2.36, pigeonhole to 0.4.24
- fixed dsync not replicating sieve scripts (#1419426)
- fix plugins incorrectly reporting epipe errors(#1489943)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-2" date="1532952000">- fix defaut permissions of gost run files</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3" date="1537358400">- fix global ACL directory configuration search path (#1630380)
- update first/last_valid_gid range patch (#1630409)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3.1" date="1568289600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1751383)</changelog>
</package>
<package pkgid="0978a5236254f1efb7edbf222b4d4a20fde40d22d54e49050706c203c145f094" name="dovecot" arch="x86_64">
  <version epoch="1" ver="2.2.36" rel="3.el7_7.1"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:2.2.10-3" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.2.10-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-5" date="1402488000">- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-6" date="1465214400">- add devel sub-package (#1122676)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-7" date="1465473600">- prevent warning messages from %post section if selinux-policy is
  not installed (yet) (#1057522)
- compile with xz compression support enabled (#1176214)
- fix crash in sieve script compilation (#1177852)
- wait with start after network-online target (#1209006)
- build with tcp wrappers enabled (#1229164)
- fixed userdb extra fields handling in passdb failure (#1234868)
- fix valgrind option detection for make check (#1249625)
- first valid regular user id is 1000 (#1280433)
- fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
- fixed header parsing when there were multiple same header names (#1224496)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-8" date="1490097600">- do not iterate over users outside of first/last_valid_gid range (#1280436)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-1" date="1528804800">- dovecot updated to 2.2.36, pigeonhole to 0.4.24
- fixed dsync not replicating sieve scripts (#1419426)
- fix plugins incorrectly reporting epipe errors(#1489943)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-2" date="1532952000">- fix defaut permissions of gost run files</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3" date="1537358400">- fix global ACL directory configuration search path (#1630380)
- update first/last_valid_gid range patch (#1630409)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3.1" date="1568289600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1751383)</changelog>
</package>
<package pkgid="7d1a037e9fc81cbc9001626f7bf0034bf8a5b252ea985bd7a414a0095fe1615b" name="dovecot-debuginfo" arch="i686">
  <version epoch="1" ver="2.2.36" rel="3.el7_7.1"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:2.2.10-3" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.2.10-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-5" date="1402488000">- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-6" date="1465214400">- add devel sub-package (#1122676)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-7" date="1465473600">- prevent warning messages from %post section if selinux-policy is
  not installed (yet) (#1057522)
- compile with xz compression support enabled (#1176214)
- fix crash in sieve script compilation (#1177852)
- wait with start after network-online target (#1209006)
- build with tcp wrappers enabled (#1229164)
- fixed userdb extra fields handling in passdb failure (#1234868)
- fix valgrind option detection for make check (#1249625)
- first valid regular user id is 1000 (#1280433)
- fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
- fixed header parsing when there were multiple same header names (#1224496)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-8" date="1490097600">- do not iterate over users outside of first/last_valid_gid range (#1280436)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-1" date="1528804800">- dovecot updated to 2.2.36, pigeonhole to 0.4.24
- fixed dsync not replicating sieve scripts (#1419426)
- fix plugins incorrectly reporting epipe errors(#1489943)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-2" date="1532952000">- fix defaut permissions of gost run files</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3" date="1537358400">- fix global ACL directory configuration search path (#1630380)
- update first/last_valid_gid range patch (#1630409)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3.1" date="1568289600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1751383)</changelog>
</package>
<package pkgid="d8bd93b620e4e495d3bd212f8f1c7ad6d7e99fa1312dbd1a8f8e9e1e4283a748" name="dovecot-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.2.36" rel="3.el7_7.1"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:2.2.10-3" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.2.10-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-5" date="1402488000">- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-6" date="1465214400">- add devel sub-package (#1122676)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-7" date="1465473600">- prevent warning messages from %post section if selinux-policy is
  not installed (yet) (#1057522)
- compile with xz compression support enabled (#1176214)
- fix crash in sieve script compilation (#1177852)
- wait with start after network-online target (#1209006)
- build with tcp wrappers enabled (#1229164)
- fixed userdb extra fields handling in passdb failure (#1234868)
- fix valgrind option detection for make check (#1249625)
- first valid regular user id is 1000 (#1280433)
- fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
- fixed header parsing when there were multiple same header names (#1224496)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-8" date="1490097600">- do not iterate over users outside of first/last_valid_gid range (#1280436)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-1" date="1528804800">- dovecot updated to 2.2.36, pigeonhole to 0.4.24
- fixed dsync not replicating sieve scripts (#1419426)
- fix plugins incorrectly reporting epipe errors(#1489943)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-2" date="1532952000">- fix defaut permissions of gost run files</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3" date="1537358400">- fix global ACL directory configuration search path (#1630380)
- update first/last_valid_gid range patch (#1630409)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3.1" date="1568289600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1751383)</changelog>
</package>
<package pkgid="094f0fa091209cf584e90a4e5d1b2c9b5d7ab59fa7fe37252c0ec0284d210c6a" name="dovecot-devel" arch="i686">
  <version epoch="1" ver="2.2.36" rel="3.el7_7.1"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:2.2.10-3" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.2.10-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-5" date="1402488000">- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-6" date="1465214400">- add devel sub-package (#1122676)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-7" date="1465473600">- prevent warning messages from %post section if selinux-policy is
  not installed (yet) (#1057522)
- compile with xz compression support enabled (#1176214)
- fix crash in sieve script compilation (#1177852)
- wait with start after network-online target (#1209006)
- build with tcp wrappers enabled (#1229164)
- fixed userdb extra fields handling in passdb failure (#1234868)
- fix valgrind option detection for make check (#1249625)
- first valid regular user id is 1000 (#1280433)
- fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
- fixed header parsing when there were multiple same header names (#1224496)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-8" date="1490097600">- do not iterate over users outside of first/last_valid_gid range (#1280436)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-1" date="1528804800">- dovecot updated to 2.2.36, pigeonhole to 0.4.24
- fixed dsync not replicating sieve scripts (#1419426)
- fix plugins incorrectly reporting epipe errors(#1489943)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-2" date="1532952000">- fix defaut permissions of gost run files</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3" date="1537358400">- fix global ACL directory configuration search path (#1630380)
- update first/last_valid_gid range patch (#1630409)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3.1" date="1568289600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1751383)</changelog>
</package>
<package pkgid="092f47559ce221c1e828e0a32c681305bc94cd20ca5e563d2a868b23ef2c447d" name="dovecot-devel" arch="x86_64">
  <version epoch="1" ver="2.2.36" rel="3.el7_7.1"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:2.2.10-3" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.2.10-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-5" date="1402488000">- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-6" date="1465214400">- add devel sub-package (#1122676)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-7" date="1465473600">- prevent warning messages from %post section if selinux-policy is
  not installed (yet) (#1057522)
- compile with xz compression support enabled (#1176214)
- fix crash in sieve script compilation (#1177852)
- wait with start after network-online target (#1209006)
- build with tcp wrappers enabled (#1229164)
- fixed userdb extra fields handling in passdb failure (#1234868)
- fix valgrind option detection for make check (#1249625)
- first valid regular user id is 1000 (#1280433)
- fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
- fixed header parsing when there were multiple same header names (#1224496)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-8" date="1490097600">- do not iterate over users outside of first/last_valid_gid range (#1280436)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-1" date="1528804800">- dovecot updated to 2.2.36, pigeonhole to 0.4.24
- fixed dsync not replicating sieve scripts (#1419426)
- fix plugins incorrectly reporting epipe errors(#1489943)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-2" date="1532952000">- fix defaut permissions of gost run files</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3" date="1537358400">- fix global ACL directory configuration search path (#1630380)
- update first/last_valid_gid range patch (#1630409)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3.1" date="1568289600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1751383)</changelog>
</package>
<package pkgid="17cc0e7d4f99d694ec686453c6ac24e49b38ad95b2b15b198784a301ebc57d5e" name="dovecot-mysql" arch="i686">
  <version epoch="1" ver="2.2.36" rel="3.el7_7.1"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:2.2.10-3" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.2.10-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-5" date="1402488000">- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-6" date="1465214400">- add devel sub-package (#1122676)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-7" date="1465473600">- prevent warning messages from %post section if selinux-policy is
  not installed (yet) (#1057522)
- compile with xz compression support enabled (#1176214)
- fix crash in sieve script compilation (#1177852)
- wait with start after network-online target (#1209006)
- build with tcp wrappers enabled (#1229164)
- fixed userdb extra fields handling in passdb failure (#1234868)
- fix valgrind option detection for make check (#1249625)
- first valid regular user id is 1000 (#1280433)
- fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
- fixed header parsing when there were multiple same header names (#1224496)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-8" date="1490097600">- do not iterate over users outside of first/last_valid_gid range (#1280436)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-1" date="1528804800">- dovecot updated to 2.2.36, pigeonhole to 0.4.24
- fixed dsync not replicating sieve scripts (#1419426)
- fix plugins incorrectly reporting epipe errors(#1489943)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-2" date="1532952000">- fix defaut permissions of gost run files</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3" date="1537358400">- fix global ACL directory configuration search path (#1630380)
- update first/last_valid_gid range patch (#1630409)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3.1" date="1568289600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1751383)</changelog>
</package>
<package pkgid="98c62f3286cd695c6d45445374657e8224c8f1a492ff817158b9a1183e916db1" name="dovecot-mysql" arch="x86_64">
  <version epoch="1" ver="2.2.36" rel="3.el7_7.1"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:2.2.10-3" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.2.10-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-5" date="1402488000">- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-6" date="1465214400">- add devel sub-package (#1122676)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-7" date="1465473600">- prevent warning messages from %post section if selinux-policy is
  not installed (yet) (#1057522)
- compile with xz compression support enabled (#1176214)
- fix crash in sieve script compilation (#1177852)
- wait with start after network-online target (#1209006)
- build with tcp wrappers enabled (#1229164)
- fixed userdb extra fields handling in passdb failure (#1234868)
- fix valgrind option detection for make check (#1249625)
- first valid regular user id is 1000 (#1280433)
- fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
- fixed header parsing when there were multiple same header names (#1224496)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-8" date="1490097600">- do not iterate over users outside of first/last_valid_gid range (#1280436)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-1" date="1528804800">- dovecot updated to 2.2.36, pigeonhole to 0.4.24
- fixed dsync not replicating sieve scripts (#1419426)
- fix plugins incorrectly reporting epipe errors(#1489943)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-2" date="1532952000">- fix defaut permissions of gost run files</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3" date="1537358400">- fix global ACL directory configuration search path (#1630380)
- update first/last_valid_gid range patch (#1630409)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3.1" date="1568289600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1751383)</changelog>
</package>
<package pkgid="3c26e4c542b8cc6c22cafe89693c808b01be7162f3900c12def20937c1376fd1" name="dovecot-pgsql" arch="i686">
  <version epoch="1" ver="2.2.36" rel="3.el7_7.1"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:2.2.10-3" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.2.10-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-5" date="1402488000">- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-6" date="1465214400">- add devel sub-package (#1122676)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-7" date="1465473600">- prevent warning messages from %post section if selinux-policy is
  not installed (yet) (#1057522)
- compile with xz compression support enabled (#1176214)
- fix crash in sieve script compilation (#1177852)
- wait with start after network-online target (#1209006)
- build with tcp wrappers enabled (#1229164)
- fixed userdb extra fields handling in passdb failure (#1234868)
- fix valgrind option detection for make check (#1249625)
- first valid regular user id is 1000 (#1280433)
- fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
- fixed header parsing when there were multiple same header names (#1224496)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-8" date="1490097600">- do not iterate over users outside of first/last_valid_gid range (#1280436)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-1" date="1528804800">- dovecot updated to 2.2.36, pigeonhole to 0.4.24
- fixed dsync not replicating sieve scripts (#1419426)
- fix plugins incorrectly reporting epipe errors(#1489943)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-2" date="1532952000">- fix defaut permissions of gost run files</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3" date="1537358400">- fix global ACL directory configuration search path (#1630380)
- update first/last_valid_gid range patch (#1630409)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3.1" date="1568289600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1751383)</changelog>
</package>
<package pkgid="e76170c7875096750042571333d247bdedc6cde50f7c5d99fd4948c4e567790a" name="dovecot-pgsql" arch="x86_64">
  <version epoch="1" ver="2.2.36" rel="3.el7_7.1"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:2.2.10-3" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.2.10-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-5" date="1402488000">- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-6" date="1465214400">- add devel sub-package (#1122676)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-7" date="1465473600">- prevent warning messages from %post section if selinux-policy is
  not installed (yet) (#1057522)
- compile with xz compression support enabled (#1176214)
- fix crash in sieve script compilation (#1177852)
- wait with start after network-online target (#1209006)
- build with tcp wrappers enabled (#1229164)
- fixed userdb extra fields handling in passdb failure (#1234868)
- fix valgrind option detection for make check (#1249625)
- first valid regular user id is 1000 (#1280433)
- fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
- fixed header parsing when there were multiple same header names (#1224496)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-8" date="1490097600">- do not iterate over users outside of first/last_valid_gid range (#1280436)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-1" date="1528804800">- dovecot updated to 2.2.36, pigeonhole to 0.4.24
- fixed dsync not replicating sieve scripts (#1419426)
- fix plugins incorrectly reporting epipe errors(#1489943)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-2" date="1532952000">- fix defaut permissions of gost run files</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3" date="1537358400">- fix global ACL directory configuration search path (#1630380)
- update first/last_valid_gid range patch (#1630409)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3.1" date="1568289600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1751383)</changelog>
</package>
<package pkgid="aa82e35e36cd2c5979671d02a4867c55be7b13bfa763e015372e18b605af257f" name="dovecot-pigeonhole" arch="i686">
  <version epoch="1" ver="2.2.36" rel="3.el7_7.1"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:2.2.10-3" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.2.10-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-5" date="1402488000">- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-6" date="1465214400">- add devel sub-package (#1122676)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-7" date="1465473600">- prevent warning messages from %post section if selinux-policy is
  not installed (yet) (#1057522)
- compile with xz compression support enabled (#1176214)
- fix crash in sieve script compilation (#1177852)
- wait with start after network-online target (#1209006)
- build with tcp wrappers enabled (#1229164)
- fixed userdb extra fields handling in passdb failure (#1234868)
- fix valgrind option detection for make check (#1249625)
- first valid regular user id is 1000 (#1280433)
- fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
- fixed header parsing when there were multiple same header names (#1224496)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-8" date="1490097600">- do not iterate over users outside of first/last_valid_gid range (#1280436)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-1" date="1528804800">- dovecot updated to 2.2.36, pigeonhole to 0.4.24
- fixed dsync not replicating sieve scripts (#1419426)
- fix plugins incorrectly reporting epipe errors(#1489943)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-2" date="1532952000">- fix defaut permissions of gost run files</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3" date="1537358400">- fix global ACL directory configuration search path (#1630380)
- update first/last_valid_gid range patch (#1630409)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3.1" date="1568289600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1751383)</changelog>
</package>
<package pkgid="f66f9992833635853663cdf64dddced6ee21fa252a87dc505c1e134072f06372" name="dovecot-pigeonhole" arch="x86_64">
  <version epoch="1" ver="2.2.36" rel="3.el7_7.1"/>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:2.2.10-3" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.2.10-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-5" date="1402488000">- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-6" date="1465214400">- add devel sub-package (#1122676)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-7" date="1465473600">- prevent warning messages from %post section if selinux-policy is
  not installed (yet) (#1057522)
- compile with xz compression support enabled (#1176214)
- fix crash in sieve script compilation (#1177852)
- wait with start after network-online target (#1209006)
- build with tcp wrappers enabled (#1229164)
- fixed userdb extra fields handling in passdb failure (#1234868)
- fix valgrind option detection for make check (#1249625)
- first valid regular user id is 1000 (#1280433)
- fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
- fixed header parsing when there were multiple same header names (#1224496)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.10-8" date="1490097600">- do not iterate over users outside of first/last_valid_gid range (#1280436)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-1" date="1528804800">- dovecot updated to 2.2.36, pigeonhole to 0.4.24
- fixed dsync not replicating sieve scripts (#1419426)
- fix plugins incorrectly reporting epipe errors(#1489943)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-2" date="1532952000">- fix defaut permissions of gost run files</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3" date="1537358400">- fix global ACL directory configuration search path (#1630380)
- update first/last_valid_gid range patch (#1630409)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.2.36-3.1" date="1568289600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1751383)</changelog>
</package>
<package pkgid="ceebadd5fd31aad867f1c8a9b39bdbe3429ebbedc9c8d723833bf71ddcbf2c82" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="e5361de044557d6ba16c7bb37566ea912039eee1a63308b1f24d8156a7175ede" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="6cc57dadd602710d4387478738e49f21d512ff5cfb788baa56e04afc102525f3" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="1088b2fcfdd0c4614700b51246e6a119f94b6fbd7482d244b3733145bd6f6f47" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="fa081a0e89534c16e4d3036b70e3e07c3cd48ba569dc53b2a918df5ad26f4e4b" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-13" date="1512561600">- firewalld: also reload dbus config interface for global options
  (RHBZ#1514043)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
</package>
<package pkgid="11c00acd4c79ef095540b250bb95ba7055e24a86495f88cfd80f808b2cfca88e" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-13" date="1512561600">- firewalld: also reload dbus config interface for global options
  (RHBZ#1514043)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
</package>
<package pkgid="c82f37b6876fd7854d1509f63f6cb81e000847ab98450259218cab73eb40a6f0" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
</package>
<package pkgid="ed62937f2a71df19ecb29c8fec703189339d481b2de12295bb0fa255eb78d90d" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
</package>
<package pkgid="441f5fe02cc1958945a574cd7d6a8d1f9df853543722b22f5abd34e09aac8a84" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.3"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.3" date="1579176000">- fix: rich rule destination with services</changelog>
</package>
<package pkgid="b1b9c5e1f7c69fe17b29554096d1259037eace4b63e499500d95f3844aad4ecf" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.3"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.3" date="1579176000">- fix: rich rule destination with services</changelog>
</package>
<package pkgid="a505b77e2d65a81903d828406fae245e7735c7477a1e0f51cf66c158b1c6ec15" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-13" date="1512561600">- firewalld: also reload dbus config interface for global options
  (RHBZ#1514043)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
</package>
<package pkgid="f81938fd8c94f43732c227b5219181729ec37adbc9f3d5251fc0f5ae7d9f2b34" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-13" date="1512561600">- firewalld: also reload dbus config interface for global options
  (RHBZ#1514043)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
</package>
<package pkgid="34bf53f17527bf9568107f9bc6e292f42e05febae3f162d9774c6f4faaa28c66" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
</package>
<package pkgid="3965b58f36f76e7bf91c41b08decab341d70162aefa6ff305dfaf2cce9e334e5" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
</package>
<package pkgid="12dad37d5d3b16fdd1613f8f4287f5c6534a3d7e38b0c502c6fa96d033a3e749" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.3"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.3" date="1579176000">- fix: rich rule destination with services</changelog>
</package>
<package pkgid="83765eac7130a70599319afdbe2f1e77bb66f1c354f6bfcc68bcf6d04005d70b" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.3"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.3" date="1579176000">- fix: rich rule destination with services</changelog>
</package>
<package pkgid="d79e36445843cfbde217015fa18986734bf9a0b3e4240d10a273fde1de389064" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-13" date="1512561600">- firewalld: also reload dbus config interface for global options
  (RHBZ#1514043)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
</package>
<package pkgid="91fc0ec4b82c45d7ff76c5b36d3b30cf3f2a4450e1c7fbdbd4e9a3ba04144ac1" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-13" date="1512561600">- firewalld: also reload dbus config interface for global options
  (RHBZ#1514043)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
</package>
<package pkgid="be847bd35c8bbc02bf9d435aa574796a9aa9e3d66559644d866fada86c89f7e3" name="firewalld" arch="src">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-13" date="1512561600">- firewalld: also reload dbus config interface for global options
  (RHBZ#1514043)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
</package>
<package pkgid="b992e5e6b5a5bfabc7d8f36e83edf095693572a76bfa7a6d0dceda2c3493e4e6" name="firewalld" arch="src">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-13" date="1512561600">- firewalld: also reload dbus config interface for global options
  (RHBZ#1514043)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
</package>
<package pkgid="5756d3d0462a832d8d468718e3e7ede8eb9dd5e3ec5d74308ce944af180cb99b" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
</package>
<package pkgid="8d051dd304210e8c1b2faaf4456d17b4b362aabe0f16f16a8a16fb1e85df1df8" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
</package>
<package pkgid="c45823255572d5dabae7db73233cfb01a76d99c5d43fdddbbc4de08ea4d436d7" name="firewalld" arch="src">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
</package>
<package pkgid="b21728a99c98b2e07b9b1aba69817975582110d7d555c415a17a862504ad1305" name="firewalld" arch="src">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
</package>
<package pkgid="dab805c64936802f0dd203364d2736778c9a89658217c40e9b74c189e0a4f266" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.3"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.3" date="1579176000">- fix: rich rule destination with services</changelog>
</package>
<package pkgid="ba451d3b540948a108d14a29f8e7b305bd53ff72848716c81646a6d331ced9bc" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.3"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.3" date="1579176000">- fix: rich rule destination with services</changelog>
</package>
<package pkgid="3304106350681f9c2df75f0e6d4659e858968e0129dce974ffc470a2ae5ded95" name="firewalld" arch="src">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.3"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.3" date="1579176000">- fix: rich rule destination with services</changelog>
</package>
<package pkgid="8828fb6abc2e3621b4c19ae07d69e6653d620acd61c9026c5621dad399733fc3" name="firewalld" arch="src">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.3"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.3" date="1579176000">- fix: rich rule destination with services</changelog>
</package>
<package pkgid="f917a4f994afdd9782109cf4b71ab343a2e0cf974202a9c0bead433eaabed03d" name="firewalld-filesystem" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-13" date="1512561600">- firewalld: also reload dbus config interface for global options
  (RHBZ#1514043)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
</package>
<package pkgid="46d196a81a3a4b1c1ac8af62f5970433d38de7d5794820564018d99ae2b98f85" name="firewalld-filesystem" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-13" date="1512561600">- firewalld: also reload dbus config interface for global options
  (RHBZ#1514043)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
</package>
<package pkgid="fa508888b06b926ab3e09f20465b7e029678f41d00e8e9905489251efb0e2e5a" name="firewalld-filesystem" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
</package>
<package pkgid="564ec010b78455af8ce5652d2f56a325634910ab36110d072fbdd49fc7356a81" name="firewalld-filesystem" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
</package>
<package pkgid="a5af918cb33cf0213fec55083cb6cbac9d7cf160ba2bcc50a16b483592682346" name="firewalld-filesystem" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.3"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.3" date="1579176000">- fix: rich rule destination with services</changelog>
</package>
<package pkgid="82ad463a2242d9bbd45ad00ee818f28184c5d6113b749e2bff85a5538abbd0aa" name="firewalld-filesystem" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.3"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.3" date="1579176000">- fix: rich rule destination with services</changelog>
</package>
<package pkgid="2830433f6bf540c62c383aa5cdf158f26b26aac241e6b4eb115e555e8387cbe0" name="flatpak" arch="i686">
  <version epoch="0" ver="1.0.9" rel="8.el7_7"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
</package>
<package pkgid="505fe9946036eeb2cacd3c18f99f4c2010f45f4bcdd59f97a73b916dc1ca81d8" name="flatpak" arch="src">
  <version epoch="0" ver="1.0.9" rel="8.el7_7"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
</package>
<package pkgid="d8c71133eb3e5252f3a7a5ba313255c5c4e427cfe79c9aff2984baef9da02265" name="flatpak" arch="src">
  <version epoch="0" ver="1.0.9" rel="8.el7_7"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
</package>
<package pkgid="1bc82f8940d63ca91c0c1940c1040931d0a09b33e74b1a5db2a3612cc26301cd" name="flatpak" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="8.el7_7"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
</package>
<package pkgid="1e931c228c2580e77d662a5aa2252c95aaac665e9547f96ca664a387e4ee18ab" name="flatpak-builder" arch="i686">
  <version epoch="0" ver="1.0.0" rel="8.el7_7"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
</package>
<package pkgid="03bedf7b0e9c49e4f2e7ca1a49bbd8190ad7512e4c27988f643b28e6596ed461" name="flatpak-builder" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="8.el7_7"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
</package>
<package pkgid="844758c353e9950be667f8caf0bb3d254906599120a7b652781cbb72a9315d19" name="flatpak-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.9" rel="8.el7_7"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
</package>
<package pkgid="26366684189571371a01b9a8f970f06bb07601756a1b57dcbecfb96556e53067" name="flatpak-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="8.el7_7"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
</package>
<package pkgid="d76e3d312b14571e90aed2f7fe49619a2f223a1919fe07040eb2c35910526edf" name="flatpak-devel" arch="i686">
  <version epoch="0" ver="1.0.9" rel="8.el7_7"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
</package>
<package pkgid="5fd80ca86c6dbe475d1224f23af64082d2044710a91b8aa2975773854bb1b07e" name="flatpak-devel" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="8.el7_7"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
</package>
<package pkgid="045325ec182cc9e6f21aaddc3381c00da9f2e9a83cfbec6531b8ef8132115eab" name="flatpak-libs" arch="i686">
  <version epoch="0" ver="1.0.9" rel="8.el7_7"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
</package>
<package pkgid="22ddea622a5a86ce7094c1fba60a46e9faa21c15ba031c03d992b6925a0c8730" name="flatpak-libs" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="8.el7_7"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
</package>
<package pkgid="dd8858c44c26db53a12e3d818aff5c13bbb1dfbbb148558b192540c4fdef3cfb" name="fribidi" arch="i686">
  <version epoch="0" ver="1.0.2" rel="1.el7_7.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.19.2-5" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;paragn AT fedoraproject DOT org&gt; - 0.19.2-6" date="1350388800">- spec cleanup for changed packaging guidelines</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-1" date="1354017600">- Resolves: rhbz#880490 bump to latest version</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-2" date="1355140800">- Resolves: rhbz#884000 signed warning (thanks mfabian)</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-3" date="1361188800">- Resolves: rhbz#884000 remove empty man pages</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-4" date="1364990400">- Resolves: rhbz#925368 support aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.0.2-1" date="1525435200">- Resolves: rhbz#1574858 latest version, --disable-docs because there's no c2man</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.0.2-1.1" date="1576584000">- Security fix for CVE-2019-18397
  Resolves: rhbz#1781224</changelog>
</package>
<package pkgid="c6788a7d640082d725489884894cc4c7a075be6abaf4863295b9a0efe5f24af5" name="fribidi" arch="src">
  <version epoch="0" ver="1.0.2" rel="1.el7_7.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.19.2-5" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;paragn AT fedoraproject DOT org&gt; - 0.19.2-6" date="1350388800">- spec cleanup for changed packaging guidelines</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-1" date="1354017600">- Resolves: rhbz#880490 bump to latest version</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-2" date="1355140800">- Resolves: rhbz#884000 signed warning (thanks mfabian)</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-3" date="1361188800">- Resolves: rhbz#884000 remove empty man pages</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-4" date="1364990400">- Resolves: rhbz#925368 support aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.0.2-1" date="1525435200">- Resolves: rhbz#1574858 latest version, --disable-docs because there's no c2man</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.0.2-1.1" date="1576584000">- Security fix for CVE-2019-18397
  Resolves: rhbz#1781224</changelog>
</package>
<package pkgid="8633cc087d7758a50137f75b1c96c34f8cc52793cd7728c83933cd5e74dccf2e" name="fribidi" arch="src">
  <version epoch="0" ver="1.0.2" rel="1.el7_7.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.19.2-5" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;paragn AT fedoraproject DOT org&gt; - 0.19.2-6" date="1350388800">- spec cleanup for changed packaging guidelines</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-1" date="1354017600">- Resolves: rhbz#880490 bump to latest version</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-2" date="1355140800">- Resolves: rhbz#884000 signed warning (thanks mfabian)</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-3" date="1361188800">- Resolves: rhbz#884000 remove empty man pages</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-4" date="1364990400">- Resolves: rhbz#925368 support aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.0.2-1" date="1525435200">- Resolves: rhbz#1574858 latest version, --disable-docs because there's no c2man</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.0.2-1.1" date="1576584000">- Security fix for CVE-2019-18397
  Resolves: rhbz#1781224</changelog>
</package>
<package pkgid="b50e0ecadb286f741eee96e78089a1d94bd31ac46cd409131413aa84670aac66" name="fribidi" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="1.el7_7.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.19.2-5" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;paragn AT fedoraproject DOT org&gt; - 0.19.2-6" date="1350388800">- spec cleanup for changed packaging guidelines</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-1" date="1354017600">- Resolves: rhbz#880490 bump to latest version</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-2" date="1355140800">- Resolves: rhbz#884000 signed warning (thanks mfabian)</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-3" date="1361188800">- Resolves: rhbz#884000 remove empty man pages</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-4" date="1364990400">- Resolves: rhbz#925368 support aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.0.2-1" date="1525435200">- Resolves: rhbz#1574858 latest version, --disable-docs because there's no c2man</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.0.2-1.1" date="1576584000">- Security fix for CVE-2019-18397
  Resolves: rhbz#1781224</changelog>
</package>
<package pkgid="9d79356c65cf60861baeb9f5b8215ccd59422f57ad853f3c41146b275f75f516" name="fribidi-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.2" rel="1.el7_7.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.19.2-5" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;paragn AT fedoraproject DOT org&gt; - 0.19.2-6" date="1350388800">- spec cleanup for changed packaging guidelines</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-1" date="1354017600">- Resolves: rhbz#880490 bump to latest version</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-2" date="1355140800">- Resolves: rhbz#884000 signed warning (thanks mfabian)</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-3" date="1361188800">- Resolves: rhbz#884000 remove empty man pages</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-4" date="1364990400">- Resolves: rhbz#925368 support aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.0.2-1" date="1525435200">- Resolves: rhbz#1574858 latest version, --disable-docs because there's no c2man</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.0.2-1.1" date="1576584000">- Security fix for CVE-2019-18397
  Resolves: rhbz#1781224</changelog>
</package>
<package pkgid="c6c3edceedb3394a17f172980c5d5279c194e6528bdff9c593643cf342ddcf56" name="fribidi-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="1.el7_7.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.19.2-5" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;paragn AT fedoraproject DOT org&gt; - 0.19.2-6" date="1350388800">- spec cleanup for changed packaging guidelines</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-1" date="1354017600">- Resolves: rhbz#880490 bump to latest version</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-2" date="1355140800">- Resolves: rhbz#884000 signed warning (thanks mfabian)</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-3" date="1361188800">- Resolves: rhbz#884000 remove empty man pages</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-4" date="1364990400">- Resolves: rhbz#925368 support aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.0.2-1" date="1525435200">- Resolves: rhbz#1574858 latest version, --disable-docs because there's no c2man</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.0.2-1.1" date="1576584000">- Security fix for CVE-2019-18397
  Resolves: rhbz#1781224</changelog>
</package>
<package pkgid="76d3510e072c61bdbe7d7a52c44fcb835bb16cb6f543650a17398a74e2ee6b4f" name="fribidi-devel" arch="i686">
  <version epoch="0" ver="1.0.2" rel="1.el7_7.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.19.2-5" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;paragn AT fedoraproject DOT org&gt; - 0.19.2-6" date="1350388800">- spec cleanup for changed packaging guidelines</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-1" date="1354017600">- Resolves: rhbz#880490 bump to latest version</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-2" date="1355140800">- Resolves: rhbz#884000 signed warning (thanks mfabian)</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-3" date="1361188800">- Resolves: rhbz#884000 remove empty man pages</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-4" date="1364990400">- Resolves: rhbz#925368 support aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.0.2-1" date="1525435200">- Resolves: rhbz#1574858 latest version, --disable-docs because there's no c2man</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.0.2-1.1" date="1576584000">- Security fix for CVE-2019-18397
  Resolves: rhbz#1781224</changelog>
</package>
<package pkgid="4329959e5e76ba55e63bcace585be32f35bb39c349746b8d51d6bcec51b69993" name="fribidi-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="1.el7_7.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.19.2-5" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;paragn AT fedoraproject DOT org&gt; - 0.19.2-6" date="1350388800">- spec cleanup for changed packaging guidelines</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-1" date="1354017600">- Resolves: rhbz#880490 bump to latest version</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-2" date="1355140800">- Resolves: rhbz#884000 signed warning (thanks mfabian)</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-3" date="1361188800">- Resolves: rhbz#884000 remove empty man pages</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.19.4-4" date="1364990400">- Resolves: rhbz#925368 support aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.19.4-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.0.2-1" date="1525435200">- Resolves: rhbz#1574858 latest version, --disable-docs because there's no c2man</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.0.2-1.1" date="1576584000">- Security fix for CVE-2019-18397
  Resolves: rhbz#1781224</changelog>
</package>
<package pkgid="09eb7bbdecf6d569c1983f85a4bc61012dde4facd0b6689fde399c650ce68ef1" name="ghostscript" arch="i686">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="654a7353f52da273b1f5d9c0722b702db61e78dcd380bcb6139f4d93c9ccabae" name="ghostscript" arch="src">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="faa6cf386fe20e7198245af3b1904be88b845d494c92a56d0eacbd924c4d9797" name="ghostscript" arch="src">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="f989fc9a6cd5fef8a62ee7b82d15097297789bd3797e06ae171ebbeeee3b4990" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="a91a45499911ec9d4377b19fbf318d7cba08d8e8c3cc1ebf23961527329c08b6" name="ghostscript" arch="i686">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="c190066b6fe7668f5c941a9c5213f83366014ee93f80cf7983307e6d3111496a" name="ghostscript" arch="src">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="0f76ad1d1b4efca9b78272cb72b0f7f44233760880decd2a88027c7c1336a50d" name="ghostscript" arch="src">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="f35d893f2b29598c1ece9714046f68f0d780403b38ae0b8b9bdda0229fa1666d" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="26a37b5203d5c555f1ba9c7ce3eb8cb4a8d2a125c350d985a68e0093b48ffef8" name="ghostscript-cups" arch="i686">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="6ff2accea20f4ef0f3710b07b5e22c05a2caf34bbc8b7df7a25dbb89a7510011" name="ghostscript-cups" arch="x86_64">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="259834efe33448f99e95377305c5631092e91b3d096bbe7b451ff2732f88fabe" name="ghostscript-cups" arch="i686">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="33c0fd1d9013c5f89b28e665017446b6ba511a6c95061c130756ac661cdef244" name="ghostscript-cups" arch="x86_64">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="3243d1f40e5a80642e5d8c1ba3bcd1763060a0a957ddbe30d73b12843662c33a" name="ghostscript-debuginfo" arch="i686">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="1c27eb5927a05d81060d1d61caa8f3400311fda780e3ef04d84f691a6f5d9fff" name="ghostscript-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="c59c58013d9a1785ff9b072127c22afb3b7975e181b28bef98cfaf6d4e413c34" name="ghostscript-debuginfo" arch="i686">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="9a1f23af32048b5242e31f8df672f85a601741cfba368b82da613cbed81f4c33" name="ghostscript-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="dd1de462f34f3f10100e71eb8fb9c8456a550d2aaefe7dbdce7294ed6b69c0ab" name="ghostscript-doc" arch="noarch">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="1d24b700a604881d4bb37bc8af5f053a0a00fa9a199819d0e519eedd93081ddb" name="ghostscript-doc" arch="noarch">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="450be5bde9f52355e7e9796586474905f86ae93e2922e92a394c7d674125082c" name="ghostscript-doc" arch="noarch">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="92b6701ee248bde027c69df6c2be452cbc8bc80c9cdca480d7120c6f661a1414" name="ghostscript-doc" arch="noarch">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="9efb91b0ac8bc3c3ab10229aed6bb6f4bac60d9d3649fc79f6565cad04fa1bd7" name="ghostscript-gtk" arch="i686">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="f5c6118131707a8383096bd1f7523984b8e34a2ee16923707901d594eecb4be2" name="ghostscript-gtk" arch="x86_64">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="ba03e6b371f7638323b9f56d21fa79c2c71c2c1835509455320ec66e872b0b6c" name="ghostscript-gtk" arch="i686">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="afedf27514927e6f0c19d6486e924d3629d6a14d99ce0afbaf621636c1aa77fe" name="ghostscript-gtk" arch="x86_64">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="ae987df096630e8b4a53110fbd6f77abcae6b9926fdcedb40e940be12609305d" name="git" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="f1499870c50140866c93f2a3026c2949f2970399f68330a8291bd36bdaee5bbe" name="git" arch="src">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="f1d888338f8327495ceaa6401aab5ee5e08ebaea519c933303d813b0bdbfee76" name="git" arch="src">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="6a244e8b82578ad6d4e2264320ec7d8ff559843953d3eb1e3f14e3038ad6966e" name="git" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="54bc47f720c18e02006d317579b4d377d9305ce0b4a23b8f1d659eb642219e96" name="git-all" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="56bc4281f89127475137442d481f23bfdec58cea383425b414736a04d2002f3e" name="git-all" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="1b146139e7e8fe7ec82df5cd33e78bca324b052b0b0e887628212fea2725b61c" name="git-bzr" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="423d5e4ac6d12da7ff070f29a45bf27926dc467a5b9b38f610d78213a59771ad" name="git-bzr" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="bfd7b7dbbe9bbd46df1840063ef79fa4b836742e39fa22cf5a432a24d1b30825" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="311054dd8c916fdde8e0b5f4a4c14284545a25ae1a3b09466d706e17ece2f590" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="a258614bc1cfde7600730fbac6d152a2add2a093a8cf4f6c11bdf07afac5aa18" name="git-daemon" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="22fbd7ca5b8cc65a5ac20375249f023c84daf7f0d04ed0992f9cc803d71b519d" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="785b50f78fe426ef76d51f649faec86dad63b07af5921f63563239cdf483411a" name="git-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="82284bb6ebc3d290832b98f62d8fd17579458c49257b9a6665dff1dbb84ae470" name="git-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="4da4607fbcf5c16ed7727a8baedd7f27a9f276cfbafceb5a70983a5b04db6005" name="git-email" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="1153171e48cbd8d6abc9cdf7e538985687b0c5b3ba9ada048a7177cbc8779004" name="git-email" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="da5e4951299bcf4ca26755a87bb42ad69f1279cf22c76b786b56a656e99f70d8" name="git-gnome-keyring" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="cb97314e20e0c259a0d8357c8efc43fda727f1a7bca18a1b317d9f3232308f3a" name="git-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="a4c4b99e84f473d871ab1e809a775fb42abbae8b0be872e17a3efc7803713df6" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="ac4148fdad3e9f78c95547c353e7cc2e79306e23372966acee6edb5dd009e72f" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="f74e7dbf330ab2acdfdf245e87737caad98afa3f7dd333b1343aa0a444af5996" name="git-hg" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="92d9dfee41dafe6295b50d8a1ddd2d164968e163839e7ef5b3530899ebbb60dc" name="git-hg" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="0f1fdce65490013354880bb0aa45e5e3ab9f8fa43c36aeb93cbb7aa043a768d9" name="git-instaweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="874a8b78be8f119ae0f6d46f231af9eb0a4a5cd991603897626dc9e6c1341b2f" name="git-instaweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="4a8e845b3c7283ed9a215365360fa7622eb7db12d8da9e58d1e147ecc8efdcdc" name="git-p4" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="05189c45e5e0138a06b7d4b71cb2edd4b21e21f5fa3e94134dc361ed7b5e3b39" name="git-p4" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="8d8a911692061a92ac5fa16f2d08e034b8bbcb0726f40f1be18374887e73f1ab" name="git-svn" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="74116246c200d07cc086ab19d9f0372ad0ff148e8383b580f8a720940ef40c31" name="git-svn" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="1732ae18f2c1c2fd333c8892d3a49d3da2cf9b03f4be5bc4ed7503b6995de671" name="gitk" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="72f3c98acb7c74ba2615a7544ca538b7b69ab1c10d25b0ac4e16fb49de543fa9" name="gitk" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="406713d032b302da7f3db26cb257c4039e62d978fbb8de31b89ce99eed6b619b" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="eb6517934110e3f83c797179efd15d340dee8898ca48d56a78776b09dd10459e" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="0ab2b34e9473949b46049cd4b0c4242d5639b697a6d99a63870027e8d62f64e3" name="gnome-settings-daemon" arch="i686">
  <version epoch="0" ver="3.28.1" rel="5.el7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-4" date="1516104000">- Force remapping of screen-integrated devices on every hotplug event
- Resolves: #1516434</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-5" date="1516276800">- Suspend after 20 minutes of inactivity, see commit for details
- Resolves: #1449171</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1516968000">- Suspend after 15 minutes as 20 minutes doesn't exist in the UI
- Resolves: #1449171</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-7" date="1517313600">- Fix logic error in password expiration notification bubble
  Resolves: #1530659
  Related: 1314443</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-8" date="1518436800">- Fix race leading to spurious screen lock at login time
  Resolves: #1532820</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
</package>
<package pkgid="ba4d231641cad21f0ae22884e4a443d8fe48eceda01fbcacbcc56d7b18a918d6" name="gnome-settings-daemon" arch="src">
  <version epoch="0" ver="3.28.1" rel="5.el7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-4" date="1516104000">- Force remapping of screen-integrated devices on every hotplug event
- Resolves: #1516434</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-5" date="1516276800">- Suspend after 20 minutes of inactivity, see commit for details
- Resolves: #1449171</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1516968000">- Suspend after 15 minutes as 20 minutes doesn't exist in the UI
- Resolves: #1449171</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-7" date="1517313600">- Fix logic error in password expiration notification bubble
  Resolves: #1530659
  Related: 1314443</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-8" date="1518436800">- Fix race leading to spurious screen lock at login time
  Resolves: #1532820</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
</package>
<package pkgid="9b05aa6b57769484a7f1c4cb9e591c0f2183f468cbf297487c98133cea44527a" name="gnome-settings-daemon" arch="src">
  <version epoch="0" ver="3.28.1" rel="5.el7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-4" date="1516104000">- Force remapping of screen-integrated devices on every hotplug event
- Resolves: #1516434</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-5" date="1516276800">- Suspend after 20 minutes of inactivity, see commit for details
- Resolves: #1449171</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1516968000">- Suspend after 15 minutes as 20 minutes doesn't exist in the UI
- Resolves: #1449171</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-7" date="1517313600">- Fix logic error in password expiration notification bubble
  Resolves: #1530659
  Related: 1314443</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-8" date="1518436800">- Fix race leading to spurious screen lock at login time
  Resolves: #1532820</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
</package>
<package pkgid="fa08109cb3f1d4e75d94ce9df7f2564b38665455f1b29312e4463ef45e08a187" name="gnome-settings-daemon" arch="x86_64">
  <version epoch="0" ver="3.28.1" rel="5.el7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-4" date="1516104000">- Force remapping of screen-integrated devices on every hotplug event
- Resolves: #1516434</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-5" date="1516276800">- Suspend after 20 minutes of inactivity, see commit for details
- Resolves: #1449171</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1516968000">- Suspend after 15 minutes as 20 minutes doesn't exist in the UI
- Resolves: #1449171</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-7" date="1517313600">- Fix logic error in password expiration notification bubble
  Resolves: #1530659
  Related: 1314443</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-8" date="1518436800">- Fix race leading to spurious screen lock at login time
  Resolves: #1532820</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
</package>
<package pkgid="1d6343697edc9cc2612a68e2fe45b6e0004822d2c60e514ecc0768b1f4fd738c" name="gnome-settings-daemon-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.1" rel="5.el7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-4" date="1516104000">- Force remapping of screen-integrated devices on every hotplug event
- Resolves: #1516434</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-5" date="1516276800">- Suspend after 20 minutes of inactivity, see commit for details
- Resolves: #1449171</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1516968000">- Suspend after 15 minutes as 20 minutes doesn't exist in the UI
- Resolves: #1449171</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-7" date="1517313600">- Fix logic error in password expiration notification bubble
  Resolves: #1530659
  Related: 1314443</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-8" date="1518436800">- Fix race leading to spurious screen lock at login time
  Resolves: #1532820</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
</package>
<package pkgid="2275424dda56294fd8897eecd1f0469e9f8dee2f721b5dd5f9adbca034ecdbeb" name="gnome-settings-daemon-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.1" rel="5.el7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-4" date="1516104000">- Force remapping of screen-integrated devices on every hotplug event
- Resolves: #1516434</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-5" date="1516276800">- Suspend after 20 minutes of inactivity, see commit for details
- Resolves: #1449171</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1516968000">- Suspend after 15 minutes as 20 minutes doesn't exist in the UI
- Resolves: #1449171</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-7" date="1517313600">- Fix logic error in password expiration notification bubble
  Resolves: #1530659
  Related: 1314443</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-8" date="1518436800">- Fix race leading to spurious screen lock at login time
  Resolves: #1532820</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
</package>
<package pkgid="921781fe4bd948a8eb76185ddf88147aba43bbf1c30281be93c167103580a727" name="gnome-settings-daemon-devel" arch="i686">
  <version epoch="0" ver="3.28.1" rel="5.el7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-4" date="1516104000">- Force remapping of screen-integrated devices on every hotplug event
- Resolves: #1516434</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-5" date="1516276800">- Suspend after 20 minutes of inactivity, see commit for details
- Resolves: #1449171</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1516968000">- Suspend after 15 minutes as 20 minutes doesn't exist in the UI
- Resolves: #1449171</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-7" date="1517313600">- Fix logic error in password expiration notification bubble
  Resolves: #1530659
  Related: 1314443</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-8" date="1518436800">- Fix race leading to spurious screen lock at login time
  Resolves: #1532820</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
</package>
<package pkgid="055a952b985f94d71b2044ff2b0baa200fcae937d82f488ad73c5762c62b44d7" name="gnome-settings-daemon-devel" arch="x86_64">
  <version epoch="0" ver="3.28.1" rel="5.el7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-4" date="1516104000">- Force remapping of screen-integrated devices on every hotplug event
- Resolves: #1516434</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-5" date="1516276800">- Suspend after 20 minutes of inactivity, see commit for details
- Resolves: #1449171</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1516968000">- Suspend after 15 minutes as 20 minutes doesn't exist in the UI
- Resolves: #1449171</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-7" date="1517313600">- Fix logic error in password expiration notification bubble
  Resolves: #1530659
  Related: 1314443</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-8" date="1518436800">- Fix race leading to spurious screen lock at login time
  Resolves: #1532820</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
</package>
<package pkgid="07ca5b7253f1c316c83e27ad824c7f892e32005b8e3ef324c311ea6f63b3b0c7" name="gnome-shell" arch="i686">
  <version epoch="0" ver="3.28.3" rel="13.el7_7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-4" date="1536580800">- Remove gnome-shell-browser-plugin subpackage
- Resolves: #1626104</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-5" date="1536840000">- Require xdg-desktop-portal-gtk
- Related: #1570030</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-6" date="1537358400">- Track IBus focus for X11 OSK
- Resolves: #1625700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-7" date="1548763200">- Fix revert of python3 port
  Resolves: #1493526</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-8" date="1553515200">- Fix timed login with disabled user list
  Resolves: #1658686</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553601600">- Backport NM interaction patch.
- Resolves: #1596474</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1556625600">- Backport dnd freeze fix (#1685997)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-11" date="1558699200">- Fix unresponsive-app dialog blocking other windows
  Resolves: #1713776</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1569585600">- Handle rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1570017600">- Change method for handling rapid mouse input better
  Resolves: #1756263</changelog>
</package>
<package pkgid="4a49287ae727dbc5e0c52138750049e1b06781dbe66b69edccb808e87582ecd1" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.28.3" rel="13.el7_7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-4" date="1536580800">- Remove gnome-shell-browser-plugin subpackage
- Resolves: #1626104</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-5" date="1536840000">- Require xdg-desktop-portal-gtk
- Related: #1570030</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-6" date="1537358400">- Track IBus focus for X11 OSK
- Resolves: #1625700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-7" date="1548763200">- Fix revert of python3 port
  Resolves: #1493526</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-8" date="1553515200">- Fix timed login with disabled user list
  Resolves: #1658686</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553601600">- Backport NM interaction patch.
- Resolves: #1596474</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1556625600">- Backport dnd freeze fix (#1685997)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-11" date="1558699200">- Fix unresponsive-app dialog blocking other windows
  Resolves: #1713776</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1569585600">- Handle rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1570017600">- Change method for handling rapid mouse input better
  Resolves: #1756263</changelog>
</package>
<package pkgid="a29e9a370b16ff3887423271d41e41dda252f72e98175cf2709a024f9390555e" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.28.3" rel="13.el7_7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-4" date="1536580800">- Remove gnome-shell-browser-plugin subpackage
- Resolves: #1626104</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-5" date="1536840000">- Require xdg-desktop-portal-gtk
- Related: #1570030</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-6" date="1537358400">- Track IBus focus for X11 OSK
- Resolves: #1625700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-7" date="1548763200">- Fix revert of python3 port
  Resolves: #1493526</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-8" date="1553515200">- Fix timed login with disabled user list
  Resolves: #1658686</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553601600">- Backport NM interaction patch.
- Resolves: #1596474</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1556625600">- Backport dnd freeze fix (#1685997)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-11" date="1558699200">- Fix unresponsive-app dialog blocking other windows
  Resolves: #1713776</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1569585600">- Handle rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1570017600">- Change method for handling rapid mouse input better
  Resolves: #1756263</changelog>
</package>
<package pkgid="c4fc88da509a2cbe5eee13976a9417d0a5f12dccfbc8a6f5e0fbcd64b9bb5b9e" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="13.el7_7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-4" date="1536580800">- Remove gnome-shell-browser-plugin subpackage
- Resolves: #1626104</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-5" date="1536840000">- Require xdg-desktop-portal-gtk
- Related: #1570030</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-6" date="1537358400">- Track IBus focus for X11 OSK
- Resolves: #1625700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-7" date="1548763200">- Fix revert of python3 port
  Resolves: #1493526</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-8" date="1553515200">- Fix timed login with disabled user list
  Resolves: #1658686</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553601600">- Backport NM interaction patch.
- Resolves: #1596474</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1556625600">- Backport dnd freeze fix (#1685997)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-11" date="1558699200">- Fix unresponsive-app dialog blocking other windows
  Resolves: #1713776</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1569585600">- Handle rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1570017600">- Change method for handling rapid mouse input better
  Resolves: #1756263</changelog>
</package>
<package pkgid="2e3bbd1aef356d828998ea0ab5a1d3e05f19201a4300ac082d9ad6127decee70" name="gnome-shell" arch="i686">
  <version epoch="0" ver="3.28.3" rel="14.el7_7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-5" date="1536840000">- Require xdg-desktop-portal-gtk
- Related: #1570030</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-6" date="1537358400">- Track IBus focus for X11 OSK
- Resolves: #1625700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-7" date="1548763200">- Fix revert of python3 port
  Resolves: #1493526</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-8" date="1553515200">- Fix timed login with disabled user list
  Resolves: #1658686</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553601600">- Backport NM interaction patch.
- Resolves: #1596474</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1556625600">- Backport dnd freeze fix (#1685997)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-11" date="1558699200">- Fix unresponsive-app dialog blocking other windows
  Resolves: #1713776</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1569585600">- Handle rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1570017600">- Change method for handling rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-14" date="1575374400">- Fix orphaned animation actors
  Related: #1780030</changelog>
</package>
<package pkgid="ee1df7fb4190ce73b1a3a9c72ccc456260665012e7cbb9803e78bfd03042b50b" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.28.3" rel="14.el7_7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-5" date="1536840000">- Require xdg-desktop-portal-gtk
- Related: #1570030</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-6" date="1537358400">- Track IBus focus for X11 OSK
- Resolves: #1625700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-7" date="1548763200">- Fix revert of python3 port
  Resolves: #1493526</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-8" date="1553515200">- Fix timed login with disabled user list
  Resolves: #1658686</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553601600">- Backport NM interaction patch.
- Resolves: #1596474</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1556625600">- Backport dnd freeze fix (#1685997)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-11" date="1558699200">- Fix unresponsive-app dialog blocking other windows
  Resolves: #1713776</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1569585600">- Handle rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1570017600">- Change method for handling rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-14" date="1575374400">- Fix orphaned animation actors
  Related: #1780030</changelog>
</package>
<package pkgid="7160f6c2b56387962e0849f90e4823308a657d35668f3124c1d052ae4f2f6c54" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.28.3" rel="14.el7_7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-5" date="1536840000">- Require xdg-desktop-portal-gtk
- Related: #1570030</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-6" date="1537358400">- Track IBus focus for X11 OSK
- Resolves: #1625700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-7" date="1548763200">- Fix revert of python3 port
  Resolves: #1493526</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-8" date="1553515200">- Fix timed login with disabled user list
  Resolves: #1658686</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553601600">- Backport NM interaction patch.
- Resolves: #1596474</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1556625600">- Backport dnd freeze fix (#1685997)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-11" date="1558699200">- Fix unresponsive-app dialog blocking other windows
  Resolves: #1713776</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1569585600">- Handle rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1570017600">- Change method for handling rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-14" date="1575374400">- Fix orphaned animation actors
  Related: #1780030</changelog>
</package>
<package pkgid="a164bead172e10ad53a4575d2efb9c9f233257c18b5483bed1528ac9ba0fdd13" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="14.el7_7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-5" date="1536840000">- Require xdg-desktop-portal-gtk
- Related: #1570030</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-6" date="1537358400">- Track IBus focus for X11 OSK
- Resolves: #1625700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-7" date="1548763200">- Fix revert of python3 port
  Resolves: #1493526</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-8" date="1553515200">- Fix timed login with disabled user list
  Resolves: #1658686</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553601600">- Backport NM interaction patch.
- Resolves: #1596474</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1556625600">- Backport dnd freeze fix (#1685997)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-11" date="1558699200">- Fix unresponsive-app dialog blocking other windows
  Resolves: #1713776</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1569585600">- Handle rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1570017600">- Change method for handling rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-14" date="1575374400">- Fix orphaned animation actors
  Related: #1780030</changelog>
</package>
<package pkgid="be9632af09fe84bc86dd2e056b84c53ba3ef18cddb7780bf8802e1ec147f8f79" name="gnome-shell-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="13.el7_7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-4" date="1536580800">- Remove gnome-shell-browser-plugin subpackage
- Resolves: #1626104</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-5" date="1536840000">- Require xdg-desktop-portal-gtk
- Related: #1570030</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-6" date="1537358400">- Track IBus focus for X11 OSK
- Resolves: #1625700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-7" date="1548763200">- Fix revert of python3 port
  Resolves: #1493526</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-8" date="1553515200">- Fix timed login with disabled user list
  Resolves: #1658686</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553601600">- Backport NM interaction patch.
- Resolves: #1596474</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1556625600">- Backport dnd freeze fix (#1685997)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-11" date="1558699200">- Fix unresponsive-app dialog blocking other windows
  Resolves: #1713776</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1569585600">- Handle rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1570017600">- Change method for handling rapid mouse input better
  Resolves: #1756263</changelog>
</package>
<package pkgid="85dcd83815243242a3b28edd1236c0dbb15e9a2acaeaa09c90424921a0c39a3b" name="gnome-shell-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="13.el7_7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-4" date="1536580800">- Remove gnome-shell-browser-plugin subpackage
- Resolves: #1626104</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-5" date="1536840000">- Require xdg-desktop-portal-gtk
- Related: #1570030</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-6" date="1537358400">- Track IBus focus for X11 OSK
- Resolves: #1625700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-7" date="1548763200">- Fix revert of python3 port
  Resolves: #1493526</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-8" date="1553515200">- Fix timed login with disabled user list
  Resolves: #1658686</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553601600">- Backport NM interaction patch.
- Resolves: #1596474</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1556625600">- Backport dnd freeze fix (#1685997)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-11" date="1558699200">- Fix unresponsive-app dialog blocking other windows
  Resolves: #1713776</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1569585600">- Handle rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1570017600">- Change method for handling rapid mouse input better
  Resolves: #1756263</changelog>
</package>
<package pkgid="fdbd4bbb51c905a208218a31ceb8416b9a4e3b75465b0db2a87236097a556cc0" name="gnome-shell-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="14.el7_7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-5" date="1536840000">- Require xdg-desktop-portal-gtk
- Related: #1570030</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-6" date="1537358400">- Track IBus focus for X11 OSK
- Resolves: #1625700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-7" date="1548763200">- Fix revert of python3 port
  Resolves: #1493526</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-8" date="1553515200">- Fix timed login with disabled user list
  Resolves: #1658686</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553601600">- Backport NM interaction patch.
- Resolves: #1596474</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1556625600">- Backport dnd freeze fix (#1685997)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-11" date="1558699200">- Fix unresponsive-app dialog blocking other windows
  Resolves: #1713776</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1569585600">- Handle rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1570017600">- Change method for handling rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-14" date="1575374400">- Fix orphaned animation actors
  Related: #1780030</changelog>
</package>
<package pkgid="7487b666583722c199cd42591d6c9d88279814ac5ab5305eebecda88e6e9f035" name="gnome-shell-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="14.el7_7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-5" date="1536840000">- Require xdg-desktop-portal-gtk
- Related: #1570030</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-6" date="1537358400">- Track IBus focus for X11 OSK
- Resolves: #1625700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-7" date="1548763200">- Fix revert of python3 port
  Resolves: #1493526</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-8" date="1553515200">- Fix timed login with disabled user list
  Resolves: #1658686</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553601600">- Backport NM interaction patch.
- Resolves: #1596474</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1556625600">- Backport dnd freeze fix (#1685997)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-11" date="1558699200">- Fix unresponsive-app dialog blocking other windows
  Resolves: #1713776</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1569585600">- Handle rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1570017600">- Change method for handling rapid mouse input better
  Resolves: #1756263</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-14" date="1575374400">- Fix orphaned animation actors
  Related: #1780030</changelog>
</package>
<package pkgid="88e231b04a9ad5517524f97dc1a699502702cf3fa9471663e048df52ee6ea46a" name="grubby" arch="src">
  <version epoch="0" ver="8.28" rel="26.el7.0.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 8.28-17" date="1445860800">- Fix the ordering of creating the debug entries, so they don't get picked
  when we're choosing kernel command line defaults on upgrades.
  Related: rhbz#1212128</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-18" date="1467374400">- Patched new-kernel-pkg so that kernel installations when MAKEDEBUG is
  set would put the debugging entries after the non-debugging entries.
  Resolves: #1285601
- Re-numbered the last set of patches to go with the flow. No actual
  changes to the patches; just a git mv to rename.
- Re-organized and updated the grubby man page contents to include some
  features that were not documented as well as correct typos and
  re-write some entries for better clarity.
  Resolves: #1232168</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-19" date="1486641600">- Fixed an issue where grubby's logic set the wrong default
  boot entry.
  Resolves: #1285601</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-20" date="1486641601">- Added invocations for prune_debug to spec file
  Resolves: #1285601</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-21" date="1488801600">- Resolve issues with the recent grubby logic patches that
  appeared on the ppc platform. Fix a problem that occurred
  on systems where no kernel update had ever been installed.
  Resolves: rhbz#1285601
- Specify the actual prune_debug file in sources.
  Resolves: rhbz#1285601</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-22" date="1488801601">- Resolve issues found by coverity scan.
  Resolves: rhbz#1285601</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-23" date="1490097600">- Fixes --info flag on s390/s390x.
  Related: rhbz#1285601
- Fixes --set-default-index on s390/s390x.
  Related: rhbz#1285601
- Allows prune_debug to run on s390/s390x.
  Resolves: rhbz#1285601</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 8.28-24" date="1529668800">- Ensure "grubby --default-title" takes the bootloader selection into
  account
  Resolves: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 8.28-25" date="1534248000">- Ensure /etc/sysconfig/kernel has a stable mode, now that rpm handles ghost
  files differently.
  Resolves: rhbz#1584313</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 8.28-26" date="1552910400">- Exclude building on i686
  Related: rhbz#1476273
- Fix grubby removing wrong kernel command line parameter
  Resolves: rhbz#1476273
- Improve man page for --info option (jstodola)
  Resolves: rhbz#1651673
- Print default image even if isn't a suitable one
  Resolves: rhbz#1323842</changelog>
</package>
<package pkgid="61720c6a2e3b6cfeb941b1ba9f7575cd90f443c9d418199ace60f9758162ed44" name="grubby" arch="x86_64">
  <version epoch="0" ver="8.28" rel="26.el7.0.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 8.28-17" date="1445860800">- Fix the ordering of creating the debug entries, so they don't get picked
  when we're choosing kernel command line defaults on upgrades.
  Related: rhbz#1212128</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-18" date="1467374400">- Patched new-kernel-pkg so that kernel installations when MAKEDEBUG is
  set would put the debugging entries after the non-debugging entries.
  Resolves: #1285601
- Re-numbered the last set of patches to go with the flow. No actual
  changes to the patches; just a git mv to rename.
- Re-organized and updated the grubby man page contents to include some
  features that were not documented as well as correct typos and
  re-write some entries for better clarity.
  Resolves: #1232168</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-19" date="1486641600">- Fixed an issue where grubby's logic set the wrong default
  boot entry.
  Resolves: #1285601</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-20" date="1486641601">- Added invocations for prune_debug to spec file
  Resolves: #1285601</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-21" date="1488801600">- Resolve issues with the recent grubby logic patches that
  appeared on the ppc platform. Fix a problem that occurred
  on systems where no kernel update had ever been installed.
  Resolves: rhbz#1285601
- Specify the actual prune_debug file in sources.
  Resolves: rhbz#1285601</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-22" date="1488801601">- Resolve issues found by coverity scan.
  Resolves: rhbz#1285601</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-23" date="1490097600">- Fixes --info flag on s390/s390x.
  Related: rhbz#1285601
- Fixes --set-default-index on s390/s390x.
  Related: rhbz#1285601
- Allows prune_debug to run on s390/s390x.
  Resolves: rhbz#1285601</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 8.28-24" date="1529668800">- Ensure "grubby --default-title" takes the bootloader selection into
  account
  Resolves: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 8.28-25" date="1534248000">- Ensure /etc/sysconfig/kernel has a stable mode, now that rpm handles ghost
  files differently.
  Resolves: rhbz#1584313</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 8.28-26" date="1552910400">- Exclude building on i686
  Related: rhbz#1476273
- Fix grubby removing wrong kernel command line parameter
  Resolves: rhbz#1476273
- Improve man page for --info option (jstodola)
  Resolves: rhbz#1651673
- Print default image even if isn't a suitable one
  Resolves: rhbz#1323842</changelog>
</package>
<package pkgid="623f307208541ecb758f37065f419409d5d0206b0594427e57dea354311cf442" name="grubby-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.28" rel="26.el7.0.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 8.28-17" date="1445860800">- Fix the ordering of creating the debug entries, so they don't get picked
  when we're choosing kernel command line defaults on upgrades.
  Related: rhbz#1212128</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-18" date="1467374400">- Patched new-kernel-pkg so that kernel installations when MAKEDEBUG is
  set would put the debugging entries after the non-debugging entries.
  Resolves: #1285601
- Re-numbered the last set of patches to go with the flow. No actual
  changes to the patches; just a git mv to rename.
- Re-organized and updated the grubby man page contents to include some
  features that were not documented as well as correct typos and
  re-write some entries for better clarity.
  Resolves: #1232168</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-19" date="1486641600">- Fixed an issue where grubby's logic set the wrong default
  boot entry.
  Resolves: #1285601</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-20" date="1486641601">- Added invocations for prune_debug to spec file
  Resolves: #1285601</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-21" date="1488801600">- Resolve issues with the recent grubby logic patches that
  appeared on the ppc platform. Fix a problem that occurred
  on systems where no kernel update had ever been installed.
  Resolves: rhbz#1285601
- Specify the actual prune_debug file in sources.
  Resolves: rhbz#1285601</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-22" date="1488801601">- Resolve issues found by coverity scan.
  Resolves: rhbz#1285601</changelog>
  <changelog author="rmarshall@redhat.com - 8.28-23" date="1490097600">- Fixes --info flag on s390/s390x.
  Related: rhbz#1285601
- Fixes --set-default-index on s390/s390x.
  Related: rhbz#1285601
- Allows prune_debug to run on s390/s390x.
  Resolves: rhbz#1285601</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 8.28-24" date="1529668800">- Ensure "grubby --default-title" takes the bootloader selection into
  account
  Resolves: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 8.28-25" date="1534248000">- Ensure /etc/sysconfig/kernel has a stable mode, now that rpm handles ghost
  files differently.
  Resolves: rhbz#1584313</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 8.28-26" date="1552910400">- Exclude building on i686
  Related: rhbz#1476273
- Fix grubby removing wrong kernel command line parameter
  Resolves: rhbz#1476273
- Improve man page for --info option (jstodola)
  Resolves: rhbz#1651673
- Print default image even if isn't a suitable one
  Resolves: rhbz#1323842</changelog>
</package>
<package pkgid="63853c3a2744a530eb7c0c239d06cba6da1e28d9d3e1a43b5bbf0b74045d12c3" name="hostname" arch="i686">
  <version epoch="0" ver="3.13" rel="3.el7_7.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.11-3" date="1354276800">- remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
- remove outdated de &amp; pt man pages
- /usr move: use _bindir macro</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.11-4" date="1354276801">- revert /usr move for now</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-1" date="1354881600">- 3.12: man page improvements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.12-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-3" date="1362744000">- do not ship outdated french man pages (#919198)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-4" date="1364299200">- remove void -v option from --help</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.13-1" date="1371556800">- 3.13: -v references removed upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.13-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.13-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3.13-3.1" date="1565611200">- Fix fqdn buffer size</changelog>
</package>
<package pkgid="1256541d2ffed8a539de561d764e69c3dd88601f742e1021f36b1a107bf21283" name="hostname" arch="src">
  <version epoch="0" ver="3.13" rel="3.el7_7.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.11-3" date="1354276800">- remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
- remove outdated de &amp; pt man pages
- /usr move: use _bindir macro</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.11-4" date="1354276801">- revert /usr move for now</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-1" date="1354881600">- 3.12: man page improvements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.12-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-3" date="1362744000">- do not ship outdated french man pages (#919198)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-4" date="1364299200">- remove void -v option from --help</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.13-1" date="1371556800">- 3.13: -v references removed upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.13-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.13-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3.13-3.1" date="1565611200">- Fix fqdn buffer size</changelog>
</package>
<package pkgid="02a865f41dab06b3a0e757b215cb6db41ea0bc21298424035a87d35feb28d8d6" name="hostname" arch="src">
  <version epoch="0" ver="3.13" rel="3.el7_7.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.11-3" date="1354276800">- remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
- remove outdated de &amp; pt man pages
- /usr move: use _bindir macro</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.11-4" date="1354276801">- revert /usr move for now</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-1" date="1354881600">- 3.12: man page improvements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.12-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-3" date="1362744000">- do not ship outdated french man pages (#919198)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-4" date="1364299200">- remove void -v option from --help</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.13-1" date="1371556800">- 3.13: -v references removed upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.13-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.13-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3.13-3.1" date="1565611200">- Fix fqdn buffer size</changelog>
</package>
<package pkgid="a0a2c3f3780071cad2c8c1b4b461cb3f9115a33eb235f85d6c8e7d85bb09c189" name="hostname" arch="x86_64">
  <version epoch="0" ver="3.13" rel="3.el7_7.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.11-3" date="1354276800">- remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
- remove outdated de &amp; pt man pages
- /usr move: use _bindir macro</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.11-4" date="1354276801">- revert /usr move for now</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-1" date="1354881600">- 3.12: man page improvements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.12-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-3" date="1362744000">- do not ship outdated french man pages (#919198)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-4" date="1364299200">- remove void -v option from --help</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.13-1" date="1371556800">- 3.13: -v references removed upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.13-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.13-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3.13-3.1" date="1565611200">- Fix fqdn buffer size</changelog>
</package>
<package pkgid="b3feb7cf4e23f9cd28c2d08d14a59d8895d8a675f5b8f637fd957ab811eb396d" name="hostname-debuginfo" arch="i686">
  <version epoch="0" ver="3.13" rel="3.el7_7.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.11-3" date="1354276800">- remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
- remove outdated de &amp; pt man pages
- /usr move: use _bindir macro</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.11-4" date="1354276801">- revert /usr move for now</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-1" date="1354881600">- 3.12: man page improvements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.12-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-3" date="1362744000">- do not ship outdated french man pages (#919198)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-4" date="1364299200">- remove void -v option from --help</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.13-1" date="1371556800">- 3.13: -v references removed upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.13-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.13-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3.13-3.1" date="1565611200">- Fix fqdn buffer size</changelog>
</package>
<package pkgid="a73302de2cf1c44c6817f74f3f19828910bb08bf2044b9893f79f66bbd10d6b8" name="hostname-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.13" rel="3.el7_7.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.11-3" date="1354276800">- remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
- remove outdated de &amp; pt man pages
- /usr move: use _bindir macro</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.11-4" date="1354276801">- revert /usr move for now</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-1" date="1354881600">- 3.12: man page improvements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.12-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-3" date="1362744000">- do not ship outdated french man pages (#919198)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.12-4" date="1364299200">- remove void -v option from --help</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 3.13-1" date="1371556800">- 3.13: -v references removed upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.13-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.13-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3.13-3.1" date="1565611200">- Fix fqdn buffer size</changelog>
</package>
<package pkgid="a241eda047a7fd89f0289aca2c5e97f037bb2be1fdeb1f41ca2798df7a3fa87e" name="ipa" arch="src">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="b1ece15332caaa7d7c77dac6dbbede7d26b735bfb9d762850d17caeee88de8c5" name="ipa" arch="src">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5b3412664122d578ef9506c151a6740920240bf22a253819ee19f3230903119e" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c366a2db3b792fb781410ec0794b9702e1cb7b282ea0cb341ea4f3834364495a" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f8ad6d68cd1404d9ef92150d447385c91df0f17e5464b3f62c74c3b15fb7139d" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="8884050457a12cd45b89b66643f0b7ad2d0849da7ef77a66c09ed146cac3100b" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="71ed9e9a678df2c67f0c7685fb277dc62b73af80963b251a3d4d3a33f952d487" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="9bd3b12e91d2b1e69fbf867a81d0f25eff864a726d2f6c19cd8de6a5e06df561" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d5fa2325013360eb8239919e0ea7a26a9fe28c68e66b1a28621583ccb8678177" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3bc2dab9d0dcdcf1a20d93e3a0363dd066b26b2e57a2ae1db9a07e4e2e592f5f" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="538c0e54c9062dc40b7dd9d021fbc39ba4f6e71f96be07a5ee69f306343513ef" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f43db5f0fc98f29f46dae7cfe1c06470ee66b1d82ecc96619f88f813e0133344" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a4ba1a12c87d1a2fd46dcabbcb3405998ae2e64fce79d7f9e9d33aef35eba6bd" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7f12b471db3d41723e8c7b5a233989fac829e0f963ba8434d9cd797f5815c60f" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="bee8ec76a0ae6aac327592a35f2803c9e4c5e082f004dc7d75b334c1e557cb33" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="9de377dbea2b999a37fe3e6be54897ae1b89a393c54261c8716be3a3500057c0" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7849924fb50875a6ab777d15534ac29b53d5709ce06f2cfcde48da3cc9ad7de6" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7fced7d4b009bf980b36a9b81ab3fe2b3a6db822e2a7405fdd65a1bf44afb230" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="de38a83212821b7603b373a0eb6d9b57ac40606ed41970360838f1ddd5a92b87" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="b36f9d7fc648eeedeeee2468b88e4745807c4a036f3c0b3cfbeae23a979a7260" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="37093df68731ac5d5c88e49dde46d9aac3bbb5f9530be07a4f204e1226b1ebcf" name="iproute" arch="i686">
  <version epoch="0" ver="4.11.0" rel="25.el7_7.2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-17.el7]" date="1552305600">- ip-link: Fix listing of alias interfaces (Phil Sutter) [1673226]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-18.el7]" date="1552910400">- ip: Add violation counters to VF statisctics (Andrea Claudi) [1471680]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-19.el7]" date="1553688000">- rdma: add infrastructure for RDMA tool (Andrea Claudi) [1642479 1641914]
- rdma: Add MR resource tracking information (Andrea Claudi) [1642479 1641914]
- json_writer: add new json handlers (null, float with format, lluint, hu) (Andrea Claudi) [1642479 1641914]
- lib: make resolve_hosts variable common (Andrea Claudi) [1642479 1641914]
- utils: Move BIT macro to common header (Andrea Claudi) [1642479 1641914]
- tc: flower: Add support for QinQ (Andrea Claudi) [1642347]
- man: tc-vlan.8: Fix for incorrect example (Andrea Claudi) [1593630]
- man: ip-route.8: ssthresh parameter is NUMBER (Andrea Claudi) [1593628]
- devlink: Add param command support (Andrea Claudi) [1644731]
- devlink: Update man pages and add resource man (Andrea Claudi) [1644731]
- devlink: Add support for hot reload (Andrea Claudi) [1644731]
- devlink: Add support for devlink resource abstraction (Andrea Claudi) [1644731]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-20.el7]" date="1553774400">- rdma: add man pages for RDMA tool (Andrea Claudi) [1642479]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-21.el7]" date="1556625600">- Check user supplied interface name lengths (Andrea Claudi) [1465646]
- tc: flower: No need to cache indev arg (Andrea Claudi) [1465646]
- ip{6, }tunnel: Avoid copying user-supplied interface name around (Andrea Claudi) [1465646]
- utils: strlcpy() and strlcat() don't clobber dst (Andrea Claudi) [1465646]
- lnstat_util: Make sure buffer is NUL-terminated (Andrea Claudi) [1465646]
- tc_util: No need to terminate an snprintf'ed buffer (Andrea Claudi) [1465646]
- ipxfrm: Replace STRBUF_CAT macro with strlcat() (Andrea Claudi) [1465646]
- Convert harmful calls to strncpy() to strlcpy() (Andrea Claudi) [1465646]
- Convert the obvious cases to strlcpy() (Andrea Claudi) [1465646]
- utils: Implement strlcpy() and strlcat() (Andrea Claudi) [1465646]
- lib/libnetlink: Don't pass NULL parameter to memcpy() (Andrea Claudi) [1465646]
- lib/fs: Fix and simplify make_path() (Andrea Claudi) [1465646]
- lib/bpf: Check return value of write() (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fscanf() (Andrea Claudi) [1465646]
- ss: Make sure scanned index value to unix_state_map is sane (Andrea Claudi) [1465646]
- ss: Make struct tcpstat fields 'timer' and 'timeout' unsigned (Andrea Claudi) [1465646]
- lib/ll_map: Choose size of new cache items at run-time (Andrea Claudi) [1465646]
- tc/m_xt: Fix for potential string buffer overflows (Andrea Claudi) [1465646]
- lnstat_util: Simplify alloc_and_open() a bit (Andrea Claudi) [1465646]
- lib/inet_proto: Review inet_proto_{a2n,n2a}() (Andrea Claudi) [1465646]
- lib/fs: Fix format string in find_fs_mount() (Andrea Claudi) [1465646]
- ipntable: Avoid memory allocation for filter.name (Andrea Claudi) [1465646]
- tipc/bearer: Prevent NULL pointer dereference (Andrea Claudi) [1465646]
- tc/tc_filter: Make sure filter name is not empty (Andrea Claudi) [1465646]
- tc/q_netem: Don't dereference possibly NULL pointer (Andrea Claudi) [1465646]
- ifstat, nstat: Check fdopen() return value (Andrea Claudi) [1465646]
- lib/bpf: Don't leak fp in bpf_find_mntpt() (Andrea Claudi) [1465646]
- devlink: Check return code of strslashrsplit() (Andrea Claudi) [1465646]
- iplink_vrf: Complain if main table is not found (Andrea Claudi) [1465646]
- iproute: Check mark value input (Andrea Claudi) [1465646]
- tc/q_multiq: Don't pass garbage in TCA_OPTIONS (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fstat() (Andrea Claudi) [1465646]
- ss: Use C99 initializer in netlink_show_one() (Andrea Claudi) [1465646]
- ipmaddr: Avoid accessing uninitialized data (Andrea Claudi) [1465646]
- iplink_can: Prevent overstepping array bounds (Andrea Claudi) [1465646]
- ipaddress: Avoid accessing uninitialized variable lcl (Andrea Claudi) [1465646]
- tc/m_gact: Drop dead code (Andrea Claudi) [1465646]
- ss: Drop useless assignment (Andrea Claudi) [1465646]
- ss: Skip useless check in parse_hostcond() (Andrea Claudi) [1465646]
- lib/rt_names: Drop dead code in rtnl_rttable_n2a() (Andrea Claudi) [1465646]
- iproute: Fix for missing 'Oifs:' display (Andrea Claudi) [1465646]
- ipntable: No need to check and assign to parms_rta (Andrea Claudi) [1465646]
- devlink: No need for this self-assignment (Andrea Claudi) [1465646]
- tipc/bearer: Fix resource leak in error path (Andrea Claudi) [1465646]
- ss: Fix potential memleak in unix_stats_print() (Andrea Claudi) [1465646]
- ifstat: Fix memleak in dump_kern_db() for json output (Andrea Claudi) [1465646]
- ifstat: Fix memleak in error case (Andrea Claudi) [1465646]
- ipvrf: Fix error path of vrf_switch() (Andrea Claudi) [1465646]
- tc/em_ipset: Don't leak sockfd on error path (Andrea Claudi) [1465646]
- ss: Don't leak fd in tcp_show_netlink_file() (Andrea Claudi) [1465646]
- iproute_lwtunnel: csum_mode value checking was ineffective (Andrea Claudi) [1465646]
- iproute_lwtunnel: Argument to strerror must be positive (Andrea Claudi) [1465646]
- tipc/node: Fix socket fd check in cmd_node_get_addr() (Andrea Claudi) [1465646]
- ifcfg: Quote left-hand side of [ ] expression (Andrea Claudi) [1465646]
- examples: Some shell fixes to cbq.init (Andrea Claudi) [1465646]
- ip-address: Use correct max attribute value in print_vf_stats64() (Andrea Claudi) [1679749]
- ss: enclose IPv6 address in brackets (Andrea Claudi) [1588122]
- tc: f_flower: Add support for matching first frag packets (Andrea Claudi) [1559814]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-22.el7]" date="1556625601">- bpf: minor cleanups for bpf_trace_pipe (Andrea Claudi) [1465646]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-23.el7]" date="1559736000">- tc_util: Silence spurious compiler warning (Andrea Claudi) [1714660]
- gre6: add collect metadata support (Andrea Claudi) [1714660]
- tc: m_tunnel_key: add csum/nocsum option (Andrea Claudi) [1714660]
- m_mirred: don't bail if the control action is missing (Andrea Claudi) [1714660]
- tc: fix parsing of the control action (Andrea Claudi) [1714660]
- tc: util: Don't call NEXT_ARG_FWD() in __parse_action_control() (Andrea Claudi) [1714660]
- tc: don't print error message on miss when parsing action with default (Andrea Claudi) [1714660]
- tc: gact: fix control action parsing (Andrea Claudi) [1714660]
- tc/actions: introduce support for goto chain action (Andrea Claudi) [1714660]
- tc: actions: add helpers to parse and print control actions (Andrea Claudi) [1714660]
- tc_filter: add support for chain index (Andrea Claudi) [1714660]
- gre/gre6: allow clearing {,i,o}{key,seq,csum} flags (Andrea Claudi) [1714660]
- man: ip link: document GRE tunnels (Andrea Claudi) [1714660]
- ip/tunnel: Use tnl_parse_key() to parse tunnel key (Andrea Claudi) [1714660]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-24.el7]" date="1560340800">- ss: use [::] for any address/any family sockets (Andrea Claudi) [1588122]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7]" date="1561118400">- tc: implement ingress/egress block index attributes for qdiscs (Andrea Claudi) [1721291]
- tc: introduce support for block-handle for filter operations (Andrea Claudi) [1721291]
- tc_filter: resolve device name before parsing filter (Andrea Claudi) [1721291]
- tc: introduce tc_qdisc_block_exists helper (Andrea Claudi) [1721291]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7_7.1]" date="1573819200">- netns: make /var/run/netns bind-mount recursive (Andrea Claudi) [1772827]</changelog>
</package>
<package pkgid="72c16a1d48932f77f79f9e57b1eb77a93218ea209a69e2869c999c1cfe8df623" name="iproute" arch="src">
  <version epoch="0" ver="4.11.0" rel="25.el7_7.2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-17.el7]" date="1552305600">- ip-link: Fix listing of alias interfaces (Phil Sutter) [1673226]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-18.el7]" date="1552910400">- ip: Add violation counters to VF statisctics (Andrea Claudi) [1471680]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-19.el7]" date="1553688000">- rdma: add infrastructure for RDMA tool (Andrea Claudi) [1642479 1641914]
- rdma: Add MR resource tracking information (Andrea Claudi) [1642479 1641914]
- json_writer: add new json handlers (null, float with format, lluint, hu) (Andrea Claudi) [1642479 1641914]
- lib: make resolve_hosts variable common (Andrea Claudi) [1642479 1641914]
- utils: Move BIT macro to common header (Andrea Claudi) [1642479 1641914]
- tc: flower: Add support for QinQ (Andrea Claudi) [1642347]
- man: tc-vlan.8: Fix for incorrect example (Andrea Claudi) [1593630]
- man: ip-route.8: ssthresh parameter is NUMBER (Andrea Claudi) [1593628]
- devlink: Add param command support (Andrea Claudi) [1644731]
- devlink: Update man pages and add resource man (Andrea Claudi) [1644731]
- devlink: Add support for hot reload (Andrea Claudi) [1644731]
- devlink: Add support for devlink resource abstraction (Andrea Claudi) [1644731]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-20.el7]" date="1553774400">- rdma: add man pages for RDMA tool (Andrea Claudi) [1642479]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-21.el7]" date="1556625600">- Check user supplied interface name lengths (Andrea Claudi) [1465646]
- tc: flower: No need to cache indev arg (Andrea Claudi) [1465646]
- ip{6, }tunnel: Avoid copying user-supplied interface name around (Andrea Claudi) [1465646]
- utils: strlcpy() and strlcat() don't clobber dst (Andrea Claudi) [1465646]
- lnstat_util: Make sure buffer is NUL-terminated (Andrea Claudi) [1465646]
- tc_util: No need to terminate an snprintf'ed buffer (Andrea Claudi) [1465646]
- ipxfrm: Replace STRBUF_CAT macro with strlcat() (Andrea Claudi) [1465646]
- Convert harmful calls to strncpy() to strlcpy() (Andrea Claudi) [1465646]
- Convert the obvious cases to strlcpy() (Andrea Claudi) [1465646]
- utils: Implement strlcpy() and strlcat() (Andrea Claudi) [1465646]
- lib/libnetlink: Don't pass NULL parameter to memcpy() (Andrea Claudi) [1465646]
- lib/fs: Fix and simplify make_path() (Andrea Claudi) [1465646]
- lib/bpf: Check return value of write() (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fscanf() (Andrea Claudi) [1465646]
- ss: Make sure scanned index value to unix_state_map is sane (Andrea Claudi) [1465646]
- ss: Make struct tcpstat fields 'timer' and 'timeout' unsigned (Andrea Claudi) [1465646]
- lib/ll_map: Choose size of new cache items at run-time (Andrea Claudi) [1465646]
- tc/m_xt: Fix for potential string buffer overflows (Andrea Claudi) [1465646]
- lnstat_util: Simplify alloc_and_open() a bit (Andrea Claudi) [1465646]
- lib/inet_proto: Review inet_proto_{a2n,n2a}() (Andrea Claudi) [1465646]
- lib/fs: Fix format string in find_fs_mount() (Andrea Claudi) [1465646]
- ipntable: Avoid memory allocation for filter.name (Andrea Claudi) [1465646]
- tipc/bearer: Prevent NULL pointer dereference (Andrea Claudi) [1465646]
- tc/tc_filter: Make sure filter name is not empty (Andrea Claudi) [1465646]
- tc/q_netem: Don't dereference possibly NULL pointer (Andrea Claudi) [1465646]
- ifstat, nstat: Check fdopen() return value (Andrea Claudi) [1465646]
- lib/bpf: Don't leak fp in bpf_find_mntpt() (Andrea Claudi) [1465646]
- devlink: Check return code of strslashrsplit() (Andrea Claudi) [1465646]
- iplink_vrf: Complain if main table is not found (Andrea Claudi) [1465646]
- iproute: Check mark value input (Andrea Claudi) [1465646]
- tc/q_multiq: Don't pass garbage in TCA_OPTIONS (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fstat() (Andrea Claudi) [1465646]
- ss: Use C99 initializer in netlink_show_one() (Andrea Claudi) [1465646]
- ipmaddr: Avoid accessing uninitialized data (Andrea Claudi) [1465646]
- iplink_can: Prevent overstepping array bounds (Andrea Claudi) [1465646]
- ipaddress: Avoid accessing uninitialized variable lcl (Andrea Claudi) [1465646]
- tc/m_gact: Drop dead code (Andrea Claudi) [1465646]
- ss: Drop useless assignment (Andrea Claudi) [1465646]
- ss: Skip useless check in parse_hostcond() (Andrea Claudi) [1465646]
- lib/rt_names: Drop dead code in rtnl_rttable_n2a() (Andrea Claudi) [1465646]
- iproute: Fix for missing 'Oifs:' display (Andrea Claudi) [1465646]
- ipntable: No need to check and assign to parms_rta (Andrea Claudi) [1465646]
- devlink: No need for this self-assignment (Andrea Claudi) [1465646]
- tipc/bearer: Fix resource leak in error path (Andrea Claudi) [1465646]
- ss: Fix potential memleak in unix_stats_print() (Andrea Claudi) [1465646]
- ifstat: Fix memleak in dump_kern_db() for json output (Andrea Claudi) [1465646]
- ifstat: Fix memleak in error case (Andrea Claudi) [1465646]
- ipvrf: Fix error path of vrf_switch() (Andrea Claudi) [1465646]
- tc/em_ipset: Don't leak sockfd on error path (Andrea Claudi) [1465646]
- ss: Don't leak fd in tcp_show_netlink_file() (Andrea Claudi) [1465646]
- iproute_lwtunnel: csum_mode value checking was ineffective (Andrea Claudi) [1465646]
- iproute_lwtunnel: Argument to strerror must be positive (Andrea Claudi) [1465646]
- tipc/node: Fix socket fd check in cmd_node_get_addr() (Andrea Claudi) [1465646]
- ifcfg: Quote left-hand side of [ ] expression (Andrea Claudi) [1465646]
- examples: Some shell fixes to cbq.init (Andrea Claudi) [1465646]
- ip-address: Use correct max attribute value in print_vf_stats64() (Andrea Claudi) [1679749]
- ss: enclose IPv6 address in brackets (Andrea Claudi) [1588122]
- tc: f_flower: Add support for matching first frag packets (Andrea Claudi) [1559814]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-22.el7]" date="1556625601">- bpf: minor cleanups for bpf_trace_pipe (Andrea Claudi) [1465646]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-23.el7]" date="1559736000">- tc_util: Silence spurious compiler warning (Andrea Claudi) [1714660]
- gre6: add collect metadata support (Andrea Claudi) [1714660]
- tc: m_tunnel_key: add csum/nocsum option (Andrea Claudi) [1714660]
- m_mirred: don't bail if the control action is missing (Andrea Claudi) [1714660]
- tc: fix parsing of the control action (Andrea Claudi) [1714660]
- tc: util: Don't call NEXT_ARG_FWD() in __parse_action_control() (Andrea Claudi) [1714660]
- tc: don't print error message on miss when parsing action with default (Andrea Claudi) [1714660]
- tc: gact: fix control action parsing (Andrea Claudi) [1714660]
- tc/actions: introduce support for goto chain action (Andrea Claudi) [1714660]
- tc: actions: add helpers to parse and print control actions (Andrea Claudi) [1714660]
- tc_filter: add support for chain index (Andrea Claudi) [1714660]
- gre/gre6: allow clearing {,i,o}{key,seq,csum} flags (Andrea Claudi) [1714660]
- man: ip link: document GRE tunnels (Andrea Claudi) [1714660]
- ip/tunnel: Use tnl_parse_key() to parse tunnel key (Andrea Claudi) [1714660]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-24.el7]" date="1560340800">- ss: use [::] for any address/any family sockets (Andrea Claudi) [1588122]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7]" date="1561118400">- tc: implement ingress/egress block index attributes for qdiscs (Andrea Claudi) [1721291]
- tc: introduce support for block-handle for filter operations (Andrea Claudi) [1721291]
- tc_filter: resolve device name before parsing filter (Andrea Claudi) [1721291]
- tc: introduce tc_qdisc_block_exists helper (Andrea Claudi) [1721291]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7_7.1]" date="1573819200">- netns: make /var/run/netns bind-mount recursive (Andrea Claudi) [1772827]</changelog>
</package>
<package pkgid="6e06bc04f9fa74efd7fc1e1ff219713f2d43db11206b0ac2a32f799b847412f0" name="iproute" arch="src">
  <version epoch="0" ver="4.11.0" rel="25.el7_7.2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-17.el7]" date="1552305600">- ip-link: Fix listing of alias interfaces (Phil Sutter) [1673226]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-18.el7]" date="1552910400">- ip: Add violation counters to VF statisctics (Andrea Claudi) [1471680]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-19.el7]" date="1553688000">- rdma: add infrastructure for RDMA tool (Andrea Claudi) [1642479 1641914]
- rdma: Add MR resource tracking information (Andrea Claudi) [1642479 1641914]
- json_writer: add new json handlers (null, float with format, lluint, hu) (Andrea Claudi) [1642479 1641914]
- lib: make resolve_hosts variable common (Andrea Claudi) [1642479 1641914]
- utils: Move BIT macro to common header (Andrea Claudi) [1642479 1641914]
- tc: flower: Add support for QinQ (Andrea Claudi) [1642347]
- man: tc-vlan.8: Fix for incorrect example (Andrea Claudi) [1593630]
- man: ip-route.8: ssthresh parameter is NUMBER (Andrea Claudi) [1593628]
- devlink: Add param command support (Andrea Claudi) [1644731]
- devlink: Update man pages and add resource man (Andrea Claudi) [1644731]
- devlink: Add support for hot reload (Andrea Claudi) [1644731]
- devlink: Add support for devlink resource abstraction (Andrea Claudi) [1644731]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-20.el7]" date="1553774400">- rdma: add man pages for RDMA tool (Andrea Claudi) [1642479]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-21.el7]" date="1556625600">- Check user supplied interface name lengths (Andrea Claudi) [1465646]
- tc: flower: No need to cache indev arg (Andrea Claudi) [1465646]
- ip{6, }tunnel: Avoid copying user-supplied interface name around (Andrea Claudi) [1465646]
- utils: strlcpy() and strlcat() don't clobber dst (Andrea Claudi) [1465646]
- lnstat_util: Make sure buffer is NUL-terminated (Andrea Claudi) [1465646]
- tc_util: No need to terminate an snprintf'ed buffer (Andrea Claudi) [1465646]
- ipxfrm: Replace STRBUF_CAT macro with strlcat() (Andrea Claudi) [1465646]
- Convert harmful calls to strncpy() to strlcpy() (Andrea Claudi) [1465646]
- Convert the obvious cases to strlcpy() (Andrea Claudi) [1465646]
- utils: Implement strlcpy() and strlcat() (Andrea Claudi) [1465646]
- lib/libnetlink: Don't pass NULL parameter to memcpy() (Andrea Claudi) [1465646]
- lib/fs: Fix and simplify make_path() (Andrea Claudi) [1465646]
- lib/bpf: Check return value of write() (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fscanf() (Andrea Claudi) [1465646]
- ss: Make sure scanned index value to unix_state_map is sane (Andrea Claudi) [1465646]
- ss: Make struct tcpstat fields 'timer' and 'timeout' unsigned (Andrea Claudi) [1465646]
- lib/ll_map: Choose size of new cache items at run-time (Andrea Claudi) [1465646]
- tc/m_xt: Fix for potential string buffer overflows (Andrea Claudi) [1465646]
- lnstat_util: Simplify alloc_and_open() a bit (Andrea Claudi) [1465646]
- lib/inet_proto: Review inet_proto_{a2n,n2a}() (Andrea Claudi) [1465646]
- lib/fs: Fix format string in find_fs_mount() (Andrea Claudi) [1465646]
- ipntable: Avoid memory allocation for filter.name (Andrea Claudi) [1465646]
- tipc/bearer: Prevent NULL pointer dereference (Andrea Claudi) [1465646]
- tc/tc_filter: Make sure filter name is not empty (Andrea Claudi) [1465646]
- tc/q_netem: Don't dereference possibly NULL pointer (Andrea Claudi) [1465646]
- ifstat, nstat: Check fdopen() return value (Andrea Claudi) [1465646]
- lib/bpf: Don't leak fp in bpf_find_mntpt() (Andrea Claudi) [1465646]
- devlink: Check return code of strslashrsplit() (Andrea Claudi) [1465646]
- iplink_vrf: Complain if main table is not found (Andrea Claudi) [1465646]
- iproute: Check mark value input (Andrea Claudi) [1465646]
- tc/q_multiq: Don't pass garbage in TCA_OPTIONS (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fstat() (Andrea Claudi) [1465646]
- ss: Use C99 initializer in netlink_show_one() (Andrea Claudi) [1465646]
- ipmaddr: Avoid accessing uninitialized data (Andrea Claudi) [1465646]
- iplink_can: Prevent overstepping array bounds (Andrea Claudi) [1465646]
- ipaddress: Avoid accessing uninitialized variable lcl (Andrea Claudi) [1465646]
- tc/m_gact: Drop dead code (Andrea Claudi) [1465646]
- ss: Drop useless assignment (Andrea Claudi) [1465646]
- ss: Skip useless check in parse_hostcond() (Andrea Claudi) [1465646]
- lib/rt_names: Drop dead code in rtnl_rttable_n2a() (Andrea Claudi) [1465646]
- iproute: Fix for missing 'Oifs:' display (Andrea Claudi) [1465646]
- ipntable: No need to check and assign to parms_rta (Andrea Claudi) [1465646]
- devlink: No need for this self-assignment (Andrea Claudi) [1465646]
- tipc/bearer: Fix resource leak in error path (Andrea Claudi) [1465646]
- ss: Fix potential memleak in unix_stats_print() (Andrea Claudi) [1465646]
- ifstat: Fix memleak in dump_kern_db() for json output (Andrea Claudi) [1465646]
- ifstat: Fix memleak in error case (Andrea Claudi) [1465646]
- ipvrf: Fix error path of vrf_switch() (Andrea Claudi) [1465646]
- tc/em_ipset: Don't leak sockfd on error path (Andrea Claudi) [1465646]
- ss: Don't leak fd in tcp_show_netlink_file() (Andrea Claudi) [1465646]
- iproute_lwtunnel: csum_mode value checking was ineffective (Andrea Claudi) [1465646]
- iproute_lwtunnel: Argument to strerror must be positive (Andrea Claudi) [1465646]
- tipc/node: Fix socket fd check in cmd_node_get_addr() (Andrea Claudi) [1465646]
- ifcfg: Quote left-hand side of [ ] expression (Andrea Claudi) [1465646]
- examples: Some shell fixes to cbq.init (Andrea Claudi) [1465646]
- ip-address: Use correct max attribute value in print_vf_stats64() (Andrea Claudi) [1679749]
- ss: enclose IPv6 address in brackets (Andrea Claudi) [1588122]
- tc: f_flower: Add support for matching first frag packets (Andrea Claudi) [1559814]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-22.el7]" date="1556625601">- bpf: minor cleanups for bpf_trace_pipe (Andrea Claudi) [1465646]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-23.el7]" date="1559736000">- tc_util: Silence spurious compiler warning (Andrea Claudi) [1714660]
- gre6: add collect metadata support (Andrea Claudi) [1714660]
- tc: m_tunnel_key: add csum/nocsum option (Andrea Claudi) [1714660]
- m_mirred: don't bail if the control action is missing (Andrea Claudi) [1714660]
- tc: fix parsing of the control action (Andrea Claudi) [1714660]
- tc: util: Don't call NEXT_ARG_FWD() in __parse_action_control() (Andrea Claudi) [1714660]
- tc: don't print error message on miss when parsing action with default (Andrea Claudi) [1714660]
- tc: gact: fix control action parsing (Andrea Claudi) [1714660]
- tc/actions: introduce support for goto chain action (Andrea Claudi) [1714660]
- tc: actions: add helpers to parse and print control actions (Andrea Claudi) [1714660]
- tc_filter: add support for chain index (Andrea Claudi) [1714660]
- gre/gre6: allow clearing {,i,o}{key,seq,csum} flags (Andrea Claudi) [1714660]
- man: ip link: document GRE tunnels (Andrea Claudi) [1714660]
- ip/tunnel: Use tnl_parse_key() to parse tunnel key (Andrea Claudi) [1714660]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-24.el7]" date="1560340800">- ss: use [::] for any address/any family sockets (Andrea Claudi) [1588122]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7]" date="1561118400">- tc: implement ingress/egress block index attributes for qdiscs (Andrea Claudi) [1721291]
- tc: introduce support for block-handle for filter operations (Andrea Claudi) [1721291]
- tc_filter: resolve device name before parsing filter (Andrea Claudi) [1721291]
- tc: introduce tc_qdisc_block_exists helper (Andrea Claudi) [1721291]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7_7.1]" date="1573819200">- netns: make /var/run/netns bind-mount recursive (Andrea Claudi) [1772827]</changelog>
</package>
<package pkgid="3048e31cf39fd2190af4caaae626d3db6c900364b18808f029c075944b39aebd" name="iproute" arch="x86_64">
  <version epoch="0" ver="4.11.0" rel="25.el7_7.2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-17.el7]" date="1552305600">- ip-link: Fix listing of alias interfaces (Phil Sutter) [1673226]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-18.el7]" date="1552910400">- ip: Add violation counters to VF statisctics (Andrea Claudi) [1471680]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-19.el7]" date="1553688000">- rdma: add infrastructure for RDMA tool (Andrea Claudi) [1642479 1641914]
- rdma: Add MR resource tracking information (Andrea Claudi) [1642479 1641914]
- json_writer: add new json handlers (null, float with format, lluint, hu) (Andrea Claudi) [1642479 1641914]
- lib: make resolve_hosts variable common (Andrea Claudi) [1642479 1641914]
- utils: Move BIT macro to common header (Andrea Claudi) [1642479 1641914]
- tc: flower: Add support for QinQ (Andrea Claudi) [1642347]
- man: tc-vlan.8: Fix for incorrect example (Andrea Claudi) [1593630]
- man: ip-route.8: ssthresh parameter is NUMBER (Andrea Claudi) [1593628]
- devlink: Add param command support (Andrea Claudi) [1644731]
- devlink: Update man pages and add resource man (Andrea Claudi) [1644731]
- devlink: Add support for hot reload (Andrea Claudi) [1644731]
- devlink: Add support for devlink resource abstraction (Andrea Claudi) [1644731]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-20.el7]" date="1553774400">- rdma: add man pages for RDMA tool (Andrea Claudi) [1642479]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-21.el7]" date="1556625600">- Check user supplied interface name lengths (Andrea Claudi) [1465646]
- tc: flower: No need to cache indev arg (Andrea Claudi) [1465646]
- ip{6, }tunnel: Avoid copying user-supplied interface name around (Andrea Claudi) [1465646]
- utils: strlcpy() and strlcat() don't clobber dst (Andrea Claudi) [1465646]
- lnstat_util: Make sure buffer is NUL-terminated (Andrea Claudi) [1465646]
- tc_util: No need to terminate an snprintf'ed buffer (Andrea Claudi) [1465646]
- ipxfrm: Replace STRBUF_CAT macro with strlcat() (Andrea Claudi) [1465646]
- Convert harmful calls to strncpy() to strlcpy() (Andrea Claudi) [1465646]
- Convert the obvious cases to strlcpy() (Andrea Claudi) [1465646]
- utils: Implement strlcpy() and strlcat() (Andrea Claudi) [1465646]
- lib/libnetlink: Don't pass NULL parameter to memcpy() (Andrea Claudi) [1465646]
- lib/fs: Fix and simplify make_path() (Andrea Claudi) [1465646]
- lib/bpf: Check return value of write() (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fscanf() (Andrea Claudi) [1465646]
- ss: Make sure scanned index value to unix_state_map is sane (Andrea Claudi) [1465646]
- ss: Make struct tcpstat fields 'timer' and 'timeout' unsigned (Andrea Claudi) [1465646]
- lib/ll_map: Choose size of new cache items at run-time (Andrea Claudi) [1465646]
- tc/m_xt: Fix for potential string buffer overflows (Andrea Claudi) [1465646]
- lnstat_util: Simplify alloc_and_open() a bit (Andrea Claudi) [1465646]
- lib/inet_proto: Review inet_proto_{a2n,n2a}() (Andrea Claudi) [1465646]
- lib/fs: Fix format string in find_fs_mount() (Andrea Claudi) [1465646]
- ipntable: Avoid memory allocation for filter.name (Andrea Claudi) [1465646]
- tipc/bearer: Prevent NULL pointer dereference (Andrea Claudi) [1465646]
- tc/tc_filter: Make sure filter name is not empty (Andrea Claudi) [1465646]
- tc/q_netem: Don't dereference possibly NULL pointer (Andrea Claudi) [1465646]
- ifstat, nstat: Check fdopen() return value (Andrea Claudi) [1465646]
- lib/bpf: Don't leak fp in bpf_find_mntpt() (Andrea Claudi) [1465646]
- devlink: Check return code of strslashrsplit() (Andrea Claudi) [1465646]
- iplink_vrf: Complain if main table is not found (Andrea Claudi) [1465646]
- iproute: Check mark value input (Andrea Claudi) [1465646]
- tc/q_multiq: Don't pass garbage in TCA_OPTIONS (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fstat() (Andrea Claudi) [1465646]
- ss: Use C99 initializer in netlink_show_one() (Andrea Claudi) [1465646]
- ipmaddr: Avoid accessing uninitialized data (Andrea Claudi) [1465646]
- iplink_can: Prevent overstepping array bounds (Andrea Claudi) [1465646]
- ipaddress: Avoid accessing uninitialized variable lcl (Andrea Claudi) [1465646]
- tc/m_gact: Drop dead code (Andrea Claudi) [1465646]
- ss: Drop useless assignment (Andrea Claudi) [1465646]
- ss: Skip useless check in parse_hostcond() (Andrea Claudi) [1465646]
- lib/rt_names: Drop dead code in rtnl_rttable_n2a() (Andrea Claudi) [1465646]
- iproute: Fix for missing 'Oifs:' display (Andrea Claudi) [1465646]
- ipntable: No need to check and assign to parms_rta (Andrea Claudi) [1465646]
- devlink: No need for this self-assignment (Andrea Claudi) [1465646]
- tipc/bearer: Fix resource leak in error path (Andrea Claudi) [1465646]
- ss: Fix potential memleak in unix_stats_print() (Andrea Claudi) [1465646]
- ifstat: Fix memleak in dump_kern_db() for json output (Andrea Claudi) [1465646]
- ifstat: Fix memleak in error case (Andrea Claudi) [1465646]
- ipvrf: Fix error path of vrf_switch() (Andrea Claudi) [1465646]
- tc/em_ipset: Don't leak sockfd on error path (Andrea Claudi) [1465646]
- ss: Don't leak fd in tcp_show_netlink_file() (Andrea Claudi) [1465646]
- iproute_lwtunnel: csum_mode value checking was ineffective (Andrea Claudi) [1465646]
- iproute_lwtunnel: Argument to strerror must be positive (Andrea Claudi) [1465646]
- tipc/node: Fix socket fd check in cmd_node_get_addr() (Andrea Claudi) [1465646]
- ifcfg: Quote left-hand side of [ ] expression (Andrea Claudi) [1465646]
- examples: Some shell fixes to cbq.init (Andrea Claudi) [1465646]
- ip-address: Use correct max attribute value in print_vf_stats64() (Andrea Claudi) [1679749]
- ss: enclose IPv6 address in brackets (Andrea Claudi) [1588122]
- tc: f_flower: Add support for matching first frag packets (Andrea Claudi) [1559814]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-22.el7]" date="1556625601">- bpf: minor cleanups for bpf_trace_pipe (Andrea Claudi) [1465646]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-23.el7]" date="1559736000">- tc_util: Silence spurious compiler warning (Andrea Claudi) [1714660]
- gre6: add collect metadata support (Andrea Claudi) [1714660]
- tc: m_tunnel_key: add csum/nocsum option (Andrea Claudi) [1714660]
- m_mirred: don't bail if the control action is missing (Andrea Claudi) [1714660]
- tc: fix parsing of the control action (Andrea Claudi) [1714660]
- tc: util: Don't call NEXT_ARG_FWD() in __parse_action_control() (Andrea Claudi) [1714660]
- tc: don't print error message on miss when parsing action with default (Andrea Claudi) [1714660]
- tc: gact: fix control action parsing (Andrea Claudi) [1714660]
- tc/actions: introduce support for goto chain action (Andrea Claudi) [1714660]
- tc: actions: add helpers to parse and print control actions (Andrea Claudi) [1714660]
- tc_filter: add support for chain index (Andrea Claudi) [1714660]
- gre/gre6: allow clearing {,i,o}{key,seq,csum} flags (Andrea Claudi) [1714660]
- man: ip link: document GRE tunnels (Andrea Claudi) [1714660]
- ip/tunnel: Use tnl_parse_key() to parse tunnel key (Andrea Claudi) [1714660]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-24.el7]" date="1560340800">- ss: use [::] for any address/any family sockets (Andrea Claudi) [1588122]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7]" date="1561118400">- tc: implement ingress/egress block index attributes for qdiscs (Andrea Claudi) [1721291]
- tc: introduce support for block-handle for filter operations (Andrea Claudi) [1721291]
- tc_filter: resolve device name before parsing filter (Andrea Claudi) [1721291]
- tc: introduce tc_qdisc_block_exists helper (Andrea Claudi) [1721291]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7_7.1]" date="1573819200">- netns: make /var/run/netns bind-mount recursive (Andrea Claudi) [1772827]</changelog>
</package>
<package pkgid="dfd368f7539d7b12d0e78dcf75a31acd28403d97bb74a7cdd2a7ee8228d478e5" name="iproute-debuginfo" arch="i686">
  <version epoch="0" ver="4.11.0" rel="25.el7_7.2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-17.el7]" date="1552305600">- ip-link: Fix listing of alias interfaces (Phil Sutter) [1673226]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-18.el7]" date="1552910400">- ip: Add violation counters to VF statisctics (Andrea Claudi) [1471680]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-19.el7]" date="1553688000">- rdma: add infrastructure for RDMA tool (Andrea Claudi) [1642479 1641914]
- rdma: Add MR resource tracking information (Andrea Claudi) [1642479 1641914]
- json_writer: add new json handlers (null, float with format, lluint, hu) (Andrea Claudi) [1642479 1641914]
- lib: make resolve_hosts variable common (Andrea Claudi) [1642479 1641914]
- utils: Move BIT macro to common header (Andrea Claudi) [1642479 1641914]
- tc: flower: Add support for QinQ (Andrea Claudi) [1642347]
- man: tc-vlan.8: Fix for incorrect example (Andrea Claudi) [1593630]
- man: ip-route.8: ssthresh parameter is NUMBER (Andrea Claudi) [1593628]
- devlink: Add param command support (Andrea Claudi) [1644731]
- devlink: Update man pages and add resource man (Andrea Claudi) [1644731]
- devlink: Add support for hot reload (Andrea Claudi) [1644731]
- devlink: Add support for devlink resource abstraction (Andrea Claudi) [1644731]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-20.el7]" date="1553774400">- rdma: add man pages for RDMA tool (Andrea Claudi) [1642479]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-21.el7]" date="1556625600">- Check user supplied interface name lengths (Andrea Claudi) [1465646]
- tc: flower: No need to cache indev arg (Andrea Claudi) [1465646]
- ip{6, }tunnel: Avoid copying user-supplied interface name around (Andrea Claudi) [1465646]
- utils: strlcpy() and strlcat() don't clobber dst (Andrea Claudi) [1465646]
- lnstat_util: Make sure buffer is NUL-terminated (Andrea Claudi) [1465646]
- tc_util: No need to terminate an snprintf'ed buffer (Andrea Claudi) [1465646]
- ipxfrm: Replace STRBUF_CAT macro with strlcat() (Andrea Claudi) [1465646]
- Convert harmful calls to strncpy() to strlcpy() (Andrea Claudi) [1465646]
- Convert the obvious cases to strlcpy() (Andrea Claudi) [1465646]
- utils: Implement strlcpy() and strlcat() (Andrea Claudi) [1465646]
- lib/libnetlink: Don't pass NULL parameter to memcpy() (Andrea Claudi) [1465646]
- lib/fs: Fix and simplify make_path() (Andrea Claudi) [1465646]
- lib/bpf: Check return value of write() (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fscanf() (Andrea Claudi) [1465646]
- ss: Make sure scanned index value to unix_state_map is sane (Andrea Claudi) [1465646]
- ss: Make struct tcpstat fields 'timer' and 'timeout' unsigned (Andrea Claudi) [1465646]
- lib/ll_map: Choose size of new cache items at run-time (Andrea Claudi) [1465646]
- tc/m_xt: Fix for potential string buffer overflows (Andrea Claudi) [1465646]
- lnstat_util: Simplify alloc_and_open() a bit (Andrea Claudi) [1465646]
- lib/inet_proto: Review inet_proto_{a2n,n2a}() (Andrea Claudi) [1465646]
- lib/fs: Fix format string in find_fs_mount() (Andrea Claudi) [1465646]
- ipntable: Avoid memory allocation for filter.name (Andrea Claudi) [1465646]
- tipc/bearer: Prevent NULL pointer dereference (Andrea Claudi) [1465646]
- tc/tc_filter: Make sure filter name is not empty (Andrea Claudi) [1465646]
- tc/q_netem: Don't dereference possibly NULL pointer (Andrea Claudi) [1465646]
- ifstat, nstat: Check fdopen() return value (Andrea Claudi) [1465646]
- lib/bpf: Don't leak fp in bpf_find_mntpt() (Andrea Claudi) [1465646]
- devlink: Check return code of strslashrsplit() (Andrea Claudi) [1465646]
- iplink_vrf: Complain if main table is not found (Andrea Claudi) [1465646]
- iproute: Check mark value input (Andrea Claudi) [1465646]
- tc/q_multiq: Don't pass garbage in TCA_OPTIONS (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fstat() (Andrea Claudi) [1465646]
- ss: Use C99 initializer in netlink_show_one() (Andrea Claudi) [1465646]
- ipmaddr: Avoid accessing uninitialized data (Andrea Claudi) [1465646]
- iplink_can: Prevent overstepping array bounds (Andrea Claudi) [1465646]
- ipaddress: Avoid accessing uninitialized variable lcl (Andrea Claudi) [1465646]
- tc/m_gact: Drop dead code (Andrea Claudi) [1465646]
- ss: Drop useless assignment (Andrea Claudi) [1465646]
- ss: Skip useless check in parse_hostcond() (Andrea Claudi) [1465646]
- lib/rt_names: Drop dead code in rtnl_rttable_n2a() (Andrea Claudi) [1465646]
- iproute: Fix for missing 'Oifs:' display (Andrea Claudi) [1465646]
- ipntable: No need to check and assign to parms_rta (Andrea Claudi) [1465646]
- devlink: No need for this self-assignment (Andrea Claudi) [1465646]
- tipc/bearer: Fix resource leak in error path (Andrea Claudi) [1465646]
- ss: Fix potential memleak in unix_stats_print() (Andrea Claudi) [1465646]
- ifstat: Fix memleak in dump_kern_db() for json output (Andrea Claudi) [1465646]
- ifstat: Fix memleak in error case (Andrea Claudi) [1465646]
- ipvrf: Fix error path of vrf_switch() (Andrea Claudi) [1465646]
- tc/em_ipset: Don't leak sockfd on error path (Andrea Claudi) [1465646]
- ss: Don't leak fd in tcp_show_netlink_file() (Andrea Claudi) [1465646]
- iproute_lwtunnel: csum_mode value checking was ineffective (Andrea Claudi) [1465646]
- iproute_lwtunnel: Argument to strerror must be positive (Andrea Claudi) [1465646]
- tipc/node: Fix socket fd check in cmd_node_get_addr() (Andrea Claudi) [1465646]
- ifcfg: Quote left-hand side of [ ] expression (Andrea Claudi) [1465646]
- examples: Some shell fixes to cbq.init (Andrea Claudi) [1465646]
- ip-address: Use correct max attribute value in print_vf_stats64() (Andrea Claudi) [1679749]
- ss: enclose IPv6 address in brackets (Andrea Claudi) [1588122]
- tc: f_flower: Add support for matching first frag packets (Andrea Claudi) [1559814]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-22.el7]" date="1556625601">- bpf: minor cleanups for bpf_trace_pipe (Andrea Claudi) [1465646]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-23.el7]" date="1559736000">- tc_util: Silence spurious compiler warning (Andrea Claudi) [1714660]
- gre6: add collect metadata support (Andrea Claudi) [1714660]
- tc: m_tunnel_key: add csum/nocsum option (Andrea Claudi) [1714660]
- m_mirred: don't bail if the control action is missing (Andrea Claudi) [1714660]
- tc: fix parsing of the control action (Andrea Claudi) [1714660]
- tc: util: Don't call NEXT_ARG_FWD() in __parse_action_control() (Andrea Claudi) [1714660]
- tc: don't print error message on miss when parsing action with default (Andrea Claudi) [1714660]
- tc: gact: fix control action parsing (Andrea Claudi) [1714660]
- tc/actions: introduce support for goto chain action (Andrea Claudi) [1714660]
- tc: actions: add helpers to parse and print control actions (Andrea Claudi) [1714660]
- tc_filter: add support for chain index (Andrea Claudi) [1714660]
- gre/gre6: allow clearing {,i,o}{key,seq,csum} flags (Andrea Claudi) [1714660]
- man: ip link: document GRE tunnels (Andrea Claudi) [1714660]
- ip/tunnel: Use tnl_parse_key() to parse tunnel key (Andrea Claudi) [1714660]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-24.el7]" date="1560340800">- ss: use [::] for any address/any family sockets (Andrea Claudi) [1588122]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7]" date="1561118400">- tc: implement ingress/egress block index attributes for qdiscs (Andrea Claudi) [1721291]
- tc: introduce support for block-handle for filter operations (Andrea Claudi) [1721291]
- tc_filter: resolve device name before parsing filter (Andrea Claudi) [1721291]
- tc: introduce tc_qdisc_block_exists helper (Andrea Claudi) [1721291]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7_7.1]" date="1573819200">- netns: make /var/run/netns bind-mount recursive (Andrea Claudi) [1772827]</changelog>
</package>
<package pkgid="cf4afa8c7e9f619fe9f7bc729148653228e274831711e6ff59613763e371848f" name="iproute-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.0" rel="25.el7_7.2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-17.el7]" date="1552305600">- ip-link: Fix listing of alias interfaces (Phil Sutter) [1673226]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-18.el7]" date="1552910400">- ip: Add violation counters to VF statisctics (Andrea Claudi) [1471680]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-19.el7]" date="1553688000">- rdma: add infrastructure for RDMA tool (Andrea Claudi) [1642479 1641914]
- rdma: Add MR resource tracking information (Andrea Claudi) [1642479 1641914]
- json_writer: add new json handlers (null, float with format, lluint, hu) (Andrea Claudi) [1642479 1641914]
- lib: make resolve_hosts variable common (Andrea Claudi) [1642479 1641914]
- utils: Move BIT macro to common header (Andrea Claudi) [1642479 1641914]
- tc: flower: Add support for QinQ (Andrea Claudi) [1642347]
- man: tc-vlan.8: Fix for incorrect example (Andrea Claudi) [1593630]
- man: ip-route.8: ssthresh parameter is NUMBER (Andrea Claudi) [1593628]
- devlink: Add param command support (Andrea Claudi) [1644731]
- devlink: Update man pages and add resource man (Andrea Claudi) [1644731]
- devlink: Add support for hot reload (Andrea Claudi) [1644731]
- devlink: Add support for devlink resource abstraction (Andrea Claudi) [1644731]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-20.el7]" date="1553774400">- rdma: add man pages for RDMA tool (Andrea Claudi) [1642479]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-21.el7]" date="1556625600">- Check user supplied interface name lengths (Andrea Claudi) [1465646]
- tc: flower: No need to cache indev arg (Andrea Claudi) [1465646]
- ip{6, }tunnel: Avoid copying user-supplied interface name around (Andrea Claudi) [1465646]
- utils: strlcpy() and strlcat() don't clobber dst (Andrea Claudi) [1465646]
- lnstat_util: Make sure buffer is NUL-terminated (Andrea Claudi) [1465646]
- tc_util: No need to terminate an snprintf'ed buffer (Andrea Claudi) [1465646]
- ipxfrm: Replace STRBUF_CAT macro with strlcat() (Andrea Claudi) [1465646]
- Convert harmful calls to strncpy() to strlcpy() (Andrea Claudi) [1465646]
- Convert the obvious cases to strlcpy() (Andrea Claudi) [1465646]
- utils: Implement strlcpy() and strlcat() (Andrea Claudi) [1465646]
- lib/libnetlink: Don't pass NULL parameter to memcpy() (Andrea Claudi) [1465646]
- lib/fs: Fix and simplify make_path() (Andrea Claudi) [1465646]
- lib/bpf: Check return value of write() (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fscanf() (Andrea Claudi) [1465646]
- ss: Make sure scanned index value to unix_state_map is sane (Andrea Claudi) [1465646]
- ss: Make struct tcpstat fields 'timer' and 'timeout' unsigned (Andrea Claudi) [1465646]
- lib/ll_map: Choose size of new cache items at run-time (Andrea Claudi) [1465646]
- tc/m_xt: Fix for potential string buffer overflows (Andrea Claudi) [1465646]
- lnstat_util: Simplify alloc_and_open() a bit (Andrea Claudi) [1465646]
- lib/inet_proto: Review inet_proto_{a2n,n2a}() (Andrea Claudi) [1465646]
- lib/fs: Fix format string in find_fs_mount() (Andrea Claudi) [1465646]
- ipntable: Avoid memory allocation for filter.name (Andrea Claudi) [1465646]
- tipc/bearer: Prevent NULL pointer dereference (Andrea Claudi) [1465646]
- tc/tc_filter: Make sure filter name is not empty (Andrea Claudi) [1465646]
- tc/q_netem: Don't dereference possibly NULL pointer (Andrea Claudi) [1465646]
- ifstat, nstat: Check fdopen() return value (Andrea Claudi) [1465646]
- lib/bpf: Don't leak fp in bpf_find_mntpt() (Andrea Claudi) [1465646]
- devlink: Check return code of strslashrsplit() (Andrea Claudi) [1465646]
- iplink_vrf: Complain if main table is not found (Andrea Claudi) [1465646]
- iproute: Check mark value input (Andrea Claudi) [1465646]
- tc/q_multiq: Don't pass garbage in TCA_OPTIONS (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fstat() (Andrea Claudi) [1465646]
- ss: Use C99 initializer in netlink_show_one() (Andrea Claudi) [1465646]
- ipmaddr: Avoid accessing uninitialized data (Andrea Claudi) [1465646]
- iplink_can: Prevent overstepping array bounds (Andrea Claudi) [1465646]
- ipaddress: Avoid accessing uninitialized variable lcl (Andrea Claudi) [1465646]
- tc/m_gact: Drop dead code (Andrea Claudi) [1465646]
- ss: Drop useless assignment (Andrea Claudi) [1465646]
- ss: Skip useless check in parse_hostcond() (Andrea Claudi) [1465646]
- lib/rt_names: Drop dead code in rtnl_rttable_n2a() (Andrea Claudi) [1465646]
- iproute: Fix for missing 'Oifs:' display (Andrea Claudi) [1465646]
- ipntable: No need to check and assign to parms_rta (Andrea Claudi) [1465646]
- devlink: No need for this self-assignment (Andrea Claudi) [1465646]
- tipc/bearer: Fix resource leak in error path (Andrea Claudi) [1465646]
- ss: Fix potential memleak in unix_stats_print() (Andrea Claudi) [1465646]
- ifstat: Fix memleak in dump_kern_db() for json output (Andrea Claudi) [1465646]
- ifstat: Fix memleak in error case (Andrea Claudi) [1465646]
- ipvrf: Fix error path of vrf_switch() (Andrea Claudi) [1465646]
- tc/em_ipset: Don't leak sockfd on error path (Andrea Claudi) [1465646]
- ss: Don't leak fd in tcp_show_netlink_file() (Andrea Claudi) [1465646]
- iproute_lwtunnel: csum_mode value checking was ineffective (Andrea Claudi) [1465646]
- iproute_lwtunnel: Argument to strerror must be positive (Andrea Claudi) [1465646]
- tipc/node: Fix socket fd check in cmd_node_get_addr() (Andrea Claudi) [1465646]
- ifcfg: Quote left-hand side of [ ] expression (Andrea Claudi) [1465646]
- examples: Some shell fixes to cbq.init (Andrea Claudi) [1465646]
- ip-address: Use correct max attribute value in print_vf_stats64() (Andrea Claudi) [1679749]
- ss: enclose IPv6 address in brackets (Andrea Claudi) [1588122]
- tc: f_flower: Add support for matching first frag packets (Andrea Claudi) [1559814]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-22.el7]" date="1556625601">- bpf: minor cleanups for bpf_trace_pipe (Andrea Claudi) [1465646]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-23.el7]" date="1559736000">- tc_util: Silence spurious compiler warning (Andrea Claudi) [1714660]
- gre6: add collect metadata support (Andrea Claudi) [1714660]
- tc: m_tunnel_key: add csum/nocsum option (Andrea Claudi) [1714660]
- m_mirred: don't bail if the control action is missing (Andrea Claudi) [1714660]
- tc: fix parsing of the control action (Andrea Claudi) [1714660]
- tc: util: Don't call NEXT_ARG_FWD() in __parse_action_control() (Andrea Claudi) [1714660]
- tc: don't print error message on miss when parsing action with default (Andrea Claudi) [1714660]
- tc: gact: fix control action parsing (Andrea Claudi) [1714660]
- tc/actions: introduce support for goto chain action (Andrea Claudi) [1714660]
- tc: actions: add helpers to parse and print control actions (Andrea Claudi) [1714660]
- tc_filter: add support for chain index (Andrea Claudi) [1714660]
- gre/gre6: allow clearing {,i,o}{key,seq,csum} flags (Andrea Claudi) [1714660]
- man: ip link: document GRE tunnels (Andrea Claudi) [1714660]
- ip/tunnel: Use tnl_parse_key() to parse tunnel key (Andrea Claudi) [1714660]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-24.el7]" date="1560340800">- ss: use [::] for any address/any family sockets (Andrea Claudi) [1588122]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7]" date="1561118400">- tc: implement ingress/egress block index attributes for qdiscs (Andrea Claudi) [1721291]
- tc: introduce support for block-handle for filter operations (Andrea Claudi) [1721291]
- tc_filter: resolve device name before parsing filter (Andrea Claudi) [1721291]
- tc: introduce tc_qdisc_block_exists helper (Andrea Claudi) [1721291]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7_7.1]" date="1573819200">- netns: make /var/run/netns bind-mount recursive (Andrea Claudi) [1772827]</changelog>
</package>
<package pkgid="75b596563ae9a94bf9c9bf36c18171aa57a924cfe45dc5e7358901e5c2ff713b" name="iproute-devel" arch="i686">
  <version epoch="0" ver="4.11.0" rel="25.el7_7.2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-17.el7]" date="1552305600">- ip-link: Fix listing of alias interfaces (Phil Sutter) [1673226]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-18.el7]" date="1552910400">- ip: Add violation counters to VF statisctics (Andrea Claudi) [1471680]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-19.el7]" date="1553688000">- rdma: add infrastructure for RDMA tool (Andrea Claudi) [1642479 1641914]
- rdma: Add MR resource tracking information (Andrea Claudi) [1642479 1641914]
- json_writer: add new json handlers (null, float with format, lluint, hu) (Andrea Claudi) [1642479 1641914]
- lib: make resolve_hosts variable common (Andrea Claudi) [1642479 1641914]
- utils: Move BIT macro to common header (Andrea Claudi) [1642479 1641914]
- tc: flower: Add support for QinQ (Andrea Claudi) [1642347]
- man: tc-vlan.8: Fix for incorrect example (Andrea Claudi) [1593630]
- man: ip-route.8: ssthresh parameter is NUMBER (Andrea Claudi) [1593628]
- devlink: Add param command support (Andrea Claudi) [1644731]
- devlink: Update man pages and add resource man (Andrea Claudi) [1644731]
- devlink: Add support for hot reload (Andrea Claudi) [1644731]
- devlink: Add support for devlink resource abstraction (Andrea Claudi) [1644731]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-20.el7]" date="1553774400">- rdma: add man pages for RDMA tool (Andrea Claudi) [1642479]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-21.el7]" date="1556625600">- Check user supplied interface name lengths (Andrea Claudi) [1465646]
- tc: flower: No need to cache indev arg (Andrea Claudi) [1465646]
- ip{6, }tunnel: Avoid copying user-supplied interface name around (Andrea Claudi) [1465646]
- utils: strlcpy() and strlcat() don't clobber dst (Andrea Claudi) [1465646]
- lnstat_util: Make sure buffer is NUL-terminated (Andrea Claudi) [1465646]
- tc_util: No need to terminate an snprintf'ed buffer (Andrea Claudi) [1465646]
- ipxfrm: Replace STRBUF_CAT macro with strlcat() (Andrea Claudi) [1465646]
- Convert harmful calls to strncpy() to strlcpy() (Andrea Claudi) [1465646]
- Convert the obvious cases to strlcpy() (Andrea Claudi) [1465646]
- utils: Implement strlcpy() and strlcat() (Andrea Claudi) [1465646]
- lib/libnetlink: Don't pass NULL parameter to memcpy() (Andrea Claudi) [1465646]
- lib/fs: Fix and simplify make_path() (Andrea Claudi) [1465646]
- lib/bpf: Check return value of write() (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fscanf() (Andrea Claudi) [1465646]
- ss: Make sure scanned index value to unix_state_map is sane (Andrea Claudi) [1465646]
- ss: Make struct tcpstat fields 'timer' and 'timeout' unsigned (Andrea Claudi) [1465646]
- lib/ll_map: Choose size of new cache items at run-time (Andrea Claudi) [1465646]
- tc/m_xt: Fix for potential string buffer overflows (Andrea Claudi) [1465646]
- lnstat_util: Simplify alloc_and_open() a bit (Andrea Claudi) [1465646]
- lib/inet_proto: Review inet_proto_{a2n,n2a}() (Andrea Claudi) [1465646]
- lib/fs: Fix format string in find_fs_mount() (Andrea Claudi) [1465646]
- ipntable: Avoid memory allocation for filter.name (Andrea Claudi) [1465646]
- tipc/bearer: Prevent NULL pointer dereference (Andrea Claudi) [1465646]
- tc/tc_filter: Make sure filter name is not empty (Andrea Claudi) [1465646]
- tc/q_netem: Don't dereference possibly NULL pointer (Andrea Claudi) [1465646]
- ifstat, nstat: Check fdopen() return value (Andrea Claudi) [1465646]
- lib/bpf: Don't leak fp in bpf_find_mntpt() (Andrea Claudi) [1465646]
- devlink: Check return code of strslashrsplit() (Andrea Claudi) [1465646]
- iplink_vrf: Complain if main table is not found (Andrea Claudi) [1465646]
- iproute: Check mark value input (Andrea Claudi) [1465646]
- tc/q_multiq: Don't pass garbage in TCA_OPTIONS (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fstat() (Andrea Claudi) [1465646]
- ss: Use C99 initializer in netlink_show_one() (Andrea Claudi) [1465646]
- ipmaddr: Avoid accessing uninitialized data (Andrea Claudi) [1465646]
- iplink_can: Prevent overstepping array bounds (Andrea Claudi) [1465646]
- ipaddress: Avoid accessing uninitialized variable lcl (Andrea Claudi) [1465646]
- tc/m_gact: Drop dead code (Andrea Claudi) [1465646]
- ss: Drop useless assignment (Andrea Claudi) [1465646]
- ss: Skip useless check in parse_hostcond() (Andrea Claudi) [1465646]
- lib/rt_names: Drop dead code in rtnl_rttable_n2a() (Andrea Claudi) [1465646]
- iproute: Fix for missing 'Oifs:' display (Andrea Claudi) [1465646]
- ipntable: No need to check and assign to parms_rta (Andrea Claudi) [1465646]
- devlink: No need for this self-assignment (Andrea Claudi) [1465646]
- tipc/bearer: Fix resource leak in error path (Andrea Claudi) [1465646]
- ss: Fix potential memleak in unix_stats_print() (Andrea Claudi) [1465646]
- ifstat: Fix memleak in dump_kern_db() for json output (Andrea Claudi) [1465646]
- ifstat: Fix memleak in error case (Andrea Claudi) [1465646]
- ipvrf: Fix error path of vrf_switch() (Andrea Claudi) [1465646]
- tc/em_ipset: Don't leak sockfd on error path (Andrea Claudi) [1465646]
- ss: Don't leak fd in tcp_show_netlink_file() (Andrea Claudi) [1465646]
- iproute_lwtunnel: csum_mode value checking was ineffective (Andrea Claudi) [1465646]
- iproute_lwtunnel: Argument to strerror must be positive (Andrea Claudi) [1465646]
- tipc/node: Fix socket fd check in cmd_node_get_addr() (Andrea Claudi) [1465646]
- ifcfg: Quote left-hand side of [ ] expression (Andrea Claudi) [1465646]
- examples: Some shell fixes to cbq.init (Andrea Claudi) [1465646]
- ip-address: Use correct max attribute value in print_vf_stats64() (Andrea Claudi) [1679749]
- ss: enclose IPv6 address in brackets (Andrea Claudi) [1588122]
- tc: f_flower: Add support for matching first frag packets (Andrea Claudi) [1559814]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-22.el7]" date="1556625601">- bpf: minor cleanups for bpf_trace_pipe (Andrea Claudi) [1465646]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-23.el7]" date="1559736000">- tc_util: Silence spurious compiler warning (Andrea Claudi) [1714660]
- gre6: add collect metadata support (Andrea Claudi) [1714660]
- tc: m_tunnel_key: add csum/nocsum option (Andrea Claudi) [1714660]
- m_mirred: don't bail if the control action is missing (Andrea Claudi) [1714660]
- tc: fix parsing of the control action (Andrea Claudi) [1714660]
- tc: util: Don't call NEXT_ARG_FWD() in __parse_action_control() (Andrea Claudi) [1714660]
- tc: don't print error message on miss when parsing action with default (Andrea Claudi) [1714660]
- tc: gact: fix control action parsing (Andrea Claudi) [1714660]
- tc/actions: introduce support for goto chain action (Andrea Claudi) [1714660]
- tc: actions: add helpers to parse and print control actions (Andrea Claudi) [1714660]
- tc_filter: add support for chain index (Andrea Claudi) [1714660]
- gre/gre6: allow clearing {,i,o}{key,seq,csum} flags (Andrea Claudi) [1714660]
- man: ip link: document GRE tunnels (Andrea Claudi) [1714660]
- ip/tunnel: Use tnl_parse_key() to parse tunnel key (Andrea Claudi) [1714660]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-24.el7]" date="1560340800">- ss: use [::] for any address/any family sockets (Andrea Claudi) [1588122]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7]" date="1561118400">- tc: implement ingress/egress block index attributes for qdiscs (Andrea Claudi) [1721291]
- tc: introduce support for block-handle for filter operations (Andrea Claudi) [1721291]
- tc_filter: resolve device name before parsing filter (Andrea Claudi) [1721291]
- tc: introduce tc_qdisc_block_exists helper (Andrea Claudi) [1721291]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7_7.1]" date="1573819200">- netns: make /var/run/netns bind-mount recursive (Andrea Claudi) [1772827]</changelog>
</package>
<package pkgid="d110be6762776af356af39913748f55ae5f8ec4c023b1925c42b989aaa4710c1" name="iproute-devel" arch="x86_64">
  <version epoch="0" ver="4.11.0" rel="25.el7_7.2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-17.el7]" date="1552305600">- ip-link: Fix listing of alias interfaces (Phil Sutter) [1673226]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-18.el7]" date="1552910400">- ip: Add violation counters to VF statisctics (Andrea Claudi) [1471680]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-19.el7]" date="1553688000">- rdma: add infrastructure for RDMA tool (Andrea Claudi) [1642479 1641914]
- rdma: Add MR resource tracking information (Andrea Claudi) [1642479 1641914]
- json_writer: add new json handlers (null, float with format, lluint, hu) (Andrea Claudi) [1642479 1641914]
- lib: make resolve_hosts variable common (Andrea Claudi) [1642479 1641914]
- utils: Move BIT macro to common header (Andrea Claudi) [1642479 1641914]
- tc: flower: Add support for QinQ (Andrea Claudi) [1642347]
- man: tc-vlan.8: Fix for incorrect example (Andrea Claudi) [1593630]
- man: ip-route.8: ssthresh parameter is NUMBER (Andrea Claudi) [1593628]
- devlink: Add param command support (Andrea Claudi) [1644731]
- devlink: Update man pages and add resource man (Andrea Claudi) [1644731]
- devlink: Add support for hot reload (Andrea Claudi) [1644731]
- devlink: Add support for devlink resource abstraction (Andrea Claudi) [1644731]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-20.el7]" date="1553774400">- rdma: add man pages for RDMA tool (Andrea Claudi) [1642479]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-21.el7]" date="1556625600">- Check user supplied interface name lengths (Andrea Claudi) [1465646]
- tc: flower: No need to cache indev arg (Andrea Claudi) [1465646]
- ip{6, }tunnel: Avoid copying user-supplied interface name around (Andrea Claudi) [1465646]
- utils: strlcpy() and strlcat() don't clobber dst (Andrea Claudi) [1465646]
- lnstat_util: Make sure buffer is NUL-terminated (Andrea Claudi) [1465646]
- tc_util: No need to terminate an snprintf'ed buffer (Andrea Claudi) [1465646]
- ipxfrm: Replace STRBUF_CAT macro with strlcat() (Andrea Claudi) [1465646]
- Convert harmful calls to strncpy() to strlcpy() (Andrea Claudi) [1465646]
- Convert the obvious cases to strlcpy() (Andrea Claudi) [1465646]
- utils: Implement strlcpy() and strlcat() (Andrea Claudi) [1465646]
- lib/libnetlink: Don't pass NULL parameter to memcpy() (Andrea Claudi) [1465646]
- lib/fs: Fix and simplify make_path() (Andrea Claudi) [1465646]
- lib/bpf: Check return value of write() (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fscanf() (Andrea Claudi) [1465646]
- ss: Make sure scanned index value to unix_state_map is sane (Andrea Claudi) [1465646]
- ss: Make struct tcpstat fields 'timer' and 'timeout' unsigned (Andrea Claudi) [1465646]
- lib/ll_map: Choose size of new cache items at run-time (Andrea Claudi) [1465646]
- tc/m_xt: Fix for potential string buffer overflows (Andrea Claudi) [1465646]
- lnstat_util: Simplify alloc_and_open() a bit (Andrea Claudi) [1465646]
- lib/inet_proto: Review inet_proto_{a2n,n2a}() (Andrea Claudi) [1465646]
- lib/fs: Fix format string in find_fs_mount() (Andrea Claudi) [1465646]
- ipntable: Avoid memory allocation for filter.name (Andrea Claudi) [1465646]
- tipc/bearer: Prevent NULL pointer dereference (Andrea Claudi) [1465646]
- tc/tc_filter: Make sure filter name is not empty (Andrea Claudi) [1465646]
- tc/q_netem: Don't dereference possibly NULL pointer (Andrea Claudi) [1465646]
- ifstat, nstat: Check fdopen() return value (Andrea Claudi) [1465646]
- lib/bpf: Don't leak fp in bpf_find_mntpt() (Andrea Claudi) [1465646]
- devlink: Check return code of strslashrsplit() (Andrea Claudi) [1465646]
- iplink_vrf: Complain if main table is not found (Andrea Claudi) [1465646]
- iproute: Check mark value input (Andrea Claudi) [1465646]
- tc/q_multiq: Don't pass garbage in TCA_OPTIONS (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fstat() (Andrea Claudi) [1465646]
- ss: Use C99 initializer in netlink_show_one() (Andrea Claudi) [1465646]
- ipmaddr: Avoid accessing uninitialized data (Andrea Claudi) [1465646]
- iplink_can: Prevent overstepping array bounds (Andrea Claudi) [1465646]
- ipaddress: Avoid accessing uninitialized variable lcl (Andrea Claudi) [1465646]
- tc/m_gact: Drop dead code (Andrea Claudi) [1465646]
- ss: Drop useless assignment (Andrea Claudi) [1465646]
- ss: Skip useless check in parse_hostcond() (Andrea Claudi) [1465646]
- lib/rt_names: Drop dead code in rtnl_rttable_n2a() (Andrea Claudi) [1465646]
- iproute: Fix for missing 'Oifs:' display (Andrea Claudi) [1465646]
- ipntable: No need to check and assign to parms_rta (Andrea Claudi) [1465646]
- devlink: No need for this self-assignment (Andrea Claudi) [1465646]
- tipc/bearer: Fix resource leak in error path (Andrea Claudi) [1465646]
- ss: Fix potential memleak in unix_stats_print() (Andrea Claudi) [1465646]
- ifstat: Fix memleak in dump_kern_db() for json output (Andrea Claudi) [1465646]
- ifstat: Fix memleak in error case (Andrea Claudi) [1465646]
- ipvrf: Fix error path of vrf_switch() (Andrea Claudi) [1465646]
- tc/em_ipset: Don't leak sockfd on error path (Andrea Claudi) [1465646]
- ss: Don't leak fd in tcp_show_netlink_file() (Andrea Claudi) [1465646]
- iproute_lwtunnel: csum_mode value checking was ineffective (Andrea Claudi) [1465646]
- iproute_lwtunnel: Argument to strerror must be positive (Andrea Claudi) [1465646]
- tipc/node: Fix socket fd check in cmd_node_get_addr() (Andrea Claudi) [1465646]
- ifcfg: Quote left-hand side of [ ] expression (Andrea Claudi) [1465646]
- examples: Some shell fixes to cbq.init (Andrea Claudi) [1465646]
- ip-address: Use correct max attribute value in print_vf_stats64() (Andrea Claudi) [1679749]
- ss: enclose IPv6 address in brackets (Andrea Claudi) [1588122]
- tc: f_flower: Add support for matching first frag packets (Andrea Claudi) [1559814]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-22.el7]" date="1556625601">- bpf: minor cleanups for bpf_trace_pipe (Andrea Claudi) [1465646]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-23.el7]" date="1559736000">- tc_util: Silence spurious compiler warning (Andrea Claudi) [1714660]
- gre6: add collect metadata support (Andrea Claudi) [1714660]
- tc: m_tunnel_key: add csum/nocsum option (Andrea Claudi) [1714660]
- m_mirred: don't bail if the control action is missing (Andrea Claudi) [1714660]
- tc: fix parsing of the control action (Andrea Claudi) [1714660]
- tc: util: Don't call NEXT_ARG_FWD() in __parse_action_control() (Andrea Claudi) [1714660]
- tc: don't print error message on miss when parsing action with default (Andrea Claudi) [1714660]
- tc: gact: fix control action parsing (Andrea Claudi) [1714660]
- tc/actions: introduce support for goto chain action (Andrea Claudi) [1714660]
- tc: actions: add helpers to parse and print control actions (Andrea Claudi) [1714660]
- tc_filter: add support for chain index (Andrea Claudi) [1714660]
- gre/gre6: allow clearing {,i,o}{key,seq,csum} flags (Andrea Claudi) [1714660]
- man: ip link: document GRE tunnels (Andrea Claudi) [1714660]
- ip/tunnel: Use tnl_parse_key() to parse tunnel key (Andrea Claudi) [1714660]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-24.el7]" date="1560340800">- ss: use [::] for any address/any family sockets (Andrea Claudi) [1588122]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7]" date="1561118400">- tc: implement ingress/egress block index attributes for qdiscs (Andrea Claudi) [1721291]
- tc: introduce support for block-handle for filter operations (Andrea Claudi) [1721291]
- tc_filter: resolve device name before parsing filter (Andrea Claudi) [1721291]
- tc: introduce tc_qdisc_block_exists helper (Andrea Claudi) [1721291]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7_7.1]" date="1573819200">- netns: make /var/run/netns bind-mount recursive (Andrea Claudi) [1772827]</changelog>
</package>
<package pkgid="2c5dae07c2b49ed8e8ef99e404eb49133f8b42a3c4e240f6fa0e1e405cf4a68f" name="iproute-doc" arch="i686">
  <version epoch="0" ver="4.11.0" rel="25.el7_7.2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-17.el7]" date="1552305600">- ip-link: Fix listing of alias interfaces (Phil Sutter) [1673226]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-18.el7]" date="1552910400">- ip: Add violation counters to VF statisctics (Andrea Claudi) [1471680]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-19.el7]" date="1553688000">- rdma: add infrastructure for RDMA tool (Andrea Claudi) [1642479 1641914]
- rdma: Add MR resource tracking information (Andrea Claudi) [1642479 1641914]
- json_writer: add new json handlers (null, float with format, lluint, hu) (Andrea Claudi) [1642479 1641914]
- lib: make resolve_hosts variable common (Andrea Claudi) [1642479 1641914]
- utils: Move BIT macro to common header (Andrea Claudi) [1642479 1641914]
- tc: flower: Add support for QinQ (Andrea Claudi) [1642347]
- man: tc-vlan.8: Fix for incorrect example (Andrea Claudi) [1593630]
- man: ip-route.8: ssthresh parameter is NUMBER (Andrea Claudi) [1593628]
- devlink: Add param command support (Andrea Claudi) [1644731]
- devlink: Update man pages and add resource man (Andrea Claudi) [1644731]
- devlink: Add support for hot reload (Andrea Claudi) [1644731]
- devlink: Add support for devlink resource abstraction (Andrea Claudi) [1644731]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-20.el7]" date="1553774400">- rdma: add man pages for RDMA tool (Andrea Claudi) [1642479]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-21.el7]" date="1556625600">- Check user supplied interface name lengths (Andrea Claudi) [1465646]
- tc: flower: No need to cache indev arg (Andrea Claudi) [1465646]
- ip{6, }tunnel: Avoid copying user-supplied interface name around (Andrea Claudi) [1465646]
- utils: strlcpy() and strlcat() don't clobber dst (Andrea Claudi) [1465646]
- lnstat_util: Make sure buffer is NUL-terminated (Andrea Claudi) [1465646]
- tc_util: No need to terminate an snprintf'ed buffer (Andrea Claudi) [1465646]
- ipxfrm: Replace STRBUF_CAT macro with strlcat() (Andrea Claudi) [1465646]
- Convert harmful calls to strncpy() to strlcpy() (Andrea Claudi) [1465646]
- Convert the obvious cases to strlcpy() (Andrea Claudi) [1465646]
- utils: Implement strlcpy() and strlcat() (Andrea Claudi) [1465646]
- lib/libnetlink: Don't pass NULL parameter to memcpy() (Andrea Claudi) [1465646]
- lib/fs: Fix and simplify make_path() (Andrea Claudi) [1465646]
- lib/bpf: Check return value of write() (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fscanf() (Andrea Claudi) [1465646]
- ss: Make sure scanned index value to unix_state_map is sane (Andrea Claudi) [1465646]
- ss: Make struct tcpstat fields 'timer' and 'timeout' unsigned (Andrea Claudi) [1465646]
- lib/ll_map: Choose size of new cache items at run-time (Andrea Claudi) [1465646]
- tc/m_xt: Fix for potential string buffer overflows (Andrea Claudi) [1465646]
- lnstat_util: Simplify alloc_and_open() a bit (Andrea Claudi) [1465646]
- lib/inet_proto: Review inet_proto_{a2n,n2a}() (Andrea Claudi) [1465646]
- lib/fs: Fix format string in find_fs_mount() (Andrea Claudi) [1465646]
- ipntable: Avoid memory allocation for filter.name (Andrea Claudi) [1465646]
- tipc/bearer: Prevent NULL pointer dereference (Andrea Claudi) [1465646]
- tc/tc_filter: Make sure filter name is not empty (Andrea Claudi) [1465646]
- tc/q_netem: Don't dereference possibly NULL pointer (Andrea Claudi) [1465646]
- ifstat, nstat: Check fdopen() return value (Andrea Claudi) [1465646]
- lib/bpf: Don't leak fp in bpf_find_mntpt() (Andrea Claudi) [1465646]
- devlink: Check return code of strslashrsplit() (Andrea Claudi) [1465646]
- iplink_vrf: Complain if main table is not found (Andrea Claudi) [1465646]
- iproute: Check mark value input (Andrea Claudi) [1465646]
- tc/q_multiq: Don't pass garbage in TCA_OPTIONS (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fstat() (Andrea Claudi) [1465646]
- ss: Use C99 initializer in netlink_show_one() (Andrea Claudi) [1465646]
- ipmaddr: Avoid accessing uninitialized data (Andrea Claudi) [1465646]
- iplink_can: Prevent overstepping array bounds (Andrea Claudi) [1465646]
- ipaddress: Avoid accessing uninitialized variable lcl (Andrea Claudi) [1465646]
- tc/m_gact: Drop dead code (Andrea Claudi) [1465646]
- ss: Drop useless assignment (Andrea Claudi) [1465646]
- ss: Skip useless check in parse_hostcond() (Andrea Claudi) [1465646]
- lib/rt_names: Drop dead code in rtnl_rttable_n2a() (Andrea Claudi) [1465646]
- iproute: Fix for missing 'Oifs:' display (Andrea Claudi) [1465646]
- ipntable: No need to check and assign to parms_rta (Andrea Claudi) [1465646]
- devlink: No need for this self-assignment (Andrea Claudi) [1465646]
- tipc/bearer: Fix resource leak in error path (Andrea Claudi) [1465646]
- ss: Fix potential memleak in unix_stats_print() (Andrea Claudi) [1465646]
- ifstat: Fix memleak in dump_kern_db() for json output (Andrea Claudi) [1465646]
- ifstat: Fix memleak in error case (Andrea Claudi) [1465646]
- ipvrf: Fix error path of vrf_switch() (Andrea Claudi) [1465646]
- tc/em_ipset: Don't leak sockfd on error path (Andrea Claudi) [1465646]
- ss: Don't leak fd in tcp_show_netlink_file() (Andrea Claudi) [1465646]
- iproute_lwtunnel: csum_mode value checking was ineffective (Andrea Claudi) [1465646]
- iproute_lwtunnel: Argument to strerror must be positive (Andrea Claudi) [1465646]
- tipc/node: Fix socket fd check in cmd_node_get_addr() (Andrea Claudi) [1465646]
- ifcfg: Quote left-hand side of [ ] expression (Andrea Claudi) [1465646]
- examples: Some shell fixes to cbq.init (Andrea Claudi) [1465646]
- ip-address: Use correct max attribute value in print_vf_stats64() (Andrea Claudi) [1679749]
- ss: enclose IPv6 address in brackets (Andrea Claudi) [1588122]
- tc: f_flower: Add support for matching first frag packets (Andrea Claudi) [1559814]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-22.el7]" date="1556625601">- bpf: minor cleanups for bpf_trace_pipe (Andrea Claudi) [1465646]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-23.el7]" date="1559736000">- tc_util: Silence spurious compiler warning (Andrea Claudi) [1714660]
- gre6: add collect metadata support (Andrea Claudi) [1714660]
- tc: m_tunnel_key: add csum/nocsum option (Andrea Claudi) [1714660]
- m_mirred: don't bail if the control action is missing (Andrea Claudi) [1714660]
- tc: fix parsing of the control action (Andrea Claudi) [1714660]
- tc: util: Don't call NEXT_ARG_FWD() in __parse_action_control() (Andrea Claudi) [1714660]
- tc: don't print error message on miss when parsing action with default (Andrea Claudi) [1714660]
- tc: gact: fix control action parsing (Andrea Claudi) [1714660]
- tc/actions: introduce support for goto chain action (Andrea Claudi) [1714660]
- tc: actions: add helpers to parse and print control actions (Andrea Claudi) [1714660]
- tc_filter: add support for chain index (Andrea Claudi) [1714660]
- gre/gre6: allow clearing {,i,o}{key,seq,csum} flags (Andrea Claudi) [1714660]
- man: ip link: document GRE tunnels (Andrea Claudi) [1714660]
- ip/tunnel: Use tnl_parse_key() to parse tunnel key (Andrea Claudi) [1714660]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-24.el7]" date="1560340800">- ss: use [::] for any address/any family sockets (Andrea Claudi) [1588122]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7]" date="1561118400">- tc: implement ingress/egress block index attributes for qdiscs (Andrea Claudi) [1721291]
- tc: introduce support for block-handle for filter operations (Andrea Claudi) [1721291]
- tc_filter: resolve device name before parsing filter (Andrea Claudi) [1721291]
- tc: introduce tc_qdisc_block_exists helper (Andrea Claudi) [1721291]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7_7.1]" date="1573819200">- netns: make /var/run/netns bind-mount recursive (Andrea Claudi) [1772827]</changelog>
</package>
<package pkgid="24064322fb3628006f52687e391ad39d7cf1f1b8542e7b4adff91d54239efddd" name="iproute-doc" arch="x86_64">
  <version epoch="0" ver="4.11.0" rel="25.el7_7.2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-17.el7]" date="1552305600">- ip-link: Fix listing of alias interfaces (Phil Sutter) [1673226]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-18.el7]" date="1552910400">- ip: Add violation counters to VF statisctics (Andrea Claudi) [1471680]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-19.el7]" date="1553688000">- rdma: add infrastructure for RDMA tool (Andrea Claudi) [1642479 1641914]
- rdma: Add MR resource tracking information (Andrea Claudi) [1642479 1641914]
- json_writer: add new json handlers (null, float with format, lluint, hu) (Andrea Claudi) [1642479 1641914]
- lib: make resolve_hosts variable common (Andrea Claudi) [1642479 1641914]
- utils: Move BIT macro to common header (Andrea Claudi) [1642479 1641914]
- tc: flower: Add support for QinQ (Andrea Claudi) [1642347]
- man: tc-vlan.8: Fix for incorrect example (Andrea Claudi) [1593630]
- man: ip-route.8: ssthresh parameter is NUMBER (Andrea Claudi) [1593628]
- devlink: Add param command support (Andrea Claudi) [1644731]
- devlink: Update man pages and add resource man (Andrea Claudi) [1644731]
- devlink: Add support for hot reload (Andrea Claudi) [1644731]
- devlink: Add support for devlink resource abstraction (Andrea Claudi) [1644731]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-20.el7]" date="1553774400">- rdma: add man pages for RDMA tool (Andrea Claudi) [1642479]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-21.el7]" date="1556625600">- Check user supplied interface name lengths (Andrea Claudi) [1465646]
- tc: flower: No need to cache indev arg (Andrea Claudi) [1465646]
- ip{6, }tunnel: Avoid copying user-supplied interface name around (Andrea Claudi) [1465646]
- utils: strlcpy() and strlcat() don't clobber dst (Andrea Claudi) [1465646]
- lnstat_util: Make sure buffer is NUL-terminated (Andrea Claudi) [1465646]
- tc_util: No need to terminate an snprintf'ed buffer (Andrea Claudi) [1465646]
- ipxfrm: Replace STRBUF_CAT macro with strlcat() (Andrea Claudi) [1465646]
- Convert harmful calls to strncpy() to strlcpy() (Andrea Claudi) [1465646]
- Convert the obvious cases to strlcpy() (Andrea Claudi) [1465646]
- utils: Implement strlcpy() and strlcat() (Andrea Claudi) [1465646]
- lib/libnetlink: Don't pass NULL parameter to memcpy() (Andrea Claudi) [1465646]
- lib/fs: Fix and simplify make_path() (Andrea Claudi) [1465646]
- lib/bpf: Check return value of write() (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fscanf() (Andrea Claudi) [1465646]
- ss: Make sure scanned index value to unix_state_map is sane (Andrea Claudi) [1465646]
- ss: Make struct tcpstat fields 'timer' and 'timeout' unsigned (Andrea Claudi) [1465646]
- lib/ll_map: Choose size of new cache items at run-time (Andrea Claudi) [1465646]
- tc/m_xt: Fix for potential string buffer overflows (Andrea Claudi) [1465646]
- lnstat_util: Simplify alloc_and_open() a bit (Andrea Claudi) [1465646]
- lib/inet_proto: Review inet_proto_{a2n,n2a}() (Andrea Claudi) [1465646]
- lib/fs: Fix format string in find_fs_mount() (Andrea Claudi) [1465646]
- ipntable: Avoid memory allocation for filter.name (Andrea Claudi) [1465646]
- tipc/bearer: Prevent NULL pointer dereference (Andrea Claudi) [1465646]
- tc/tc_filter: Make sure filter name is not empty (Andrea Claudi) [1465646]
- tc/q_netem: Don't dereference possibly NULL pointer (Andrea Claudi) [1465646]
- ifstat, nstat: Check fdopen() return value (Andrea Claudi) [1465646]
- lib/bpf: Don't leak fp in bpf_find_mntpt() (Andrea Claudi) [1465646]
- devlink: Check return code of strslashrsplit() (Andrea Claudi) [1465646]
- iplink_vrf: Complain if main table is not found (Andrea Claudi) [1465646]
- iproute: Check mark value input (Andrea Claudi) [1465646]
- tc/q_multiq: Don't pass garbage in TCA_OPTIONS (Andrea Claudi) [1465646]
- netem/maketable: Check return value of fstat() (Andrea Claudi) [1465646]
- ss: Use C99 initializer in netlink_show_one() (Andrea Claudi) [1465646]
- ipmaddr: Avoid accessing uninitialized data (Andrea Claudi) [1465646]
- iplink_can: Prevent overstepping array bounds (Andrea Claudi) [1465646]
- ipaddress: Avoid accessing uninitialized variable lcl (Andrea Claudi) [1465646]
- tc/m_gact: Drop dead code (Andrea Claudi) [1465646]
- ss: Drop useless assignment (Andrea Claudi) [1465646]
- ss: Skip useless check in parse_hostcond() (Andrea Claudi) [1465646]
- lib/rt_names: Drop dead code in rtnl_rttable_n2a() (Andrea Claudi) [1465646]
- iproute: Fix for missing 'Oifs:' display (Andrea Claudi) [1465646]
- ipntable: No need to check and assign to parms_rta (Andrea Claudi) [1465646]
- devlink: No need for this self-assignment (Andrea Claudi) [1465646]
- tipc/bearer: Fix resource leak in error path (Andrea Claudi) [1465646]
- ss: Fix potential memleak in unix_stats_print() (Andrea Claudi) [1465646]
- ifstat: Fix memleak in dump_kern_db() for json output (Andrea Claudi) [1465646]
- ifstat: Fix memleak in error case (Andrea Claudi) [1465646]
- ipvrf: Fix error path of vrf_switch() (Andrea Claudi) [1465646]
- tc/em_ipset: Don't leak sockfd on error path (Andrea Claudi) [1465646]
- ss: Don't leak fd in tcp_show_netlink_file() (Andrea Claudi) [1465646]
- iproute_lwtunnel: csum_mode value checking was ineffective (Andrea Claudi) [1465646]
- iproute_lwtunnel: Argument to strerror must be positive (Andrea Claudi) [1465646]
- tipc/node: Fix socket fd check in cmd_node_get_addr() (Andrea Claudi) [1465646]
- ifcfg: Quote left-hand side of [ ] expression (Andrea Claudi) [1465646]
- examples: Some shell fixes to cbq.init (Andrea Claudi) [1465646]
- ip-address: Use correct max attribute value in print_vf_stats64() (Andrea Claudi) [1679749]
- ss: enclose IPv6 address in brackets (Andrea Claudi) [1588122]
- tc: f_flower: Add support for matching first frag packets (Andrea Claudi) [1559814]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-22.el7]" date="1556625601">- bpf: minor cleanups for bpf_trace_pipe (Andrea Claudi) [1465646]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-23.el7]" date="1559736000">- tc_util: Silence spurious compiler warning (Andrea Claudi) [1714660]
- gre6: add collect metadata support (Andrea Claudi) [1714660]
- tc: m_tunnel_key: add csum/nocsum option (Andrea Claudi) [1714660]
- m_mirred: don't bail if the control action is missing (Andrea Claudi) [1714660]
- tc: fix parsing of the control action (Andrea Claudi) [1714660]
- tc: util: Don't call NEXT_ARG_FWD() in __parse_action_control() (Andrea Claudi) [1714660]
- tc: don't print error message on miss when parsing action with default (Andrea Claudi) [1714660]
- tc: gact: fix control action parsing (Andrea Claudi) [1714660]
- tc/actions: introduce support for goto chain action (Andrea Claudi) [1714660]
- tc: actions: add helpers to parse and print control actions (Andrea Claudi) [1714660]
- tc_filter: add support for chain index (Andrea Claudi) [1714660]
- gre/gre6: allow clearing {,i,o}{key,seq,csum} flags (Andrea Claudi) [1714660]
- man: ip link: document GRE tunnels (Andrea Claudi) [1714660]
- ip/tunnel: Use tnl_parse_key() to parse tunnel key (Andrea Claudi) [1714660]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-24.el7]" date="1560340800">- ss: use [::] for any address/any family sockets (Andrea Claudi) [1588122]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7]" date="1561118400">- tc: implement ingress/egress block index attributes for qdiscs (Andrea Claudi) [1721291]
- tc: introduce support for block-handle for filter operations (Andrea Claudi) [1721291]
- tc_filter: resolve device name before parsing filter (Andrea Claudi) [1721291]
- tc: introduce tc_qdisc_block_exists helper (Andrea Claudi) [1721291]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [4.11.0-25.el7_7.1]" date="1573819200">- netns: make /var/run/netns bind-mount recursive (Andrea Claudi) [1772827]</changelog>
</package>
<package pkgid="9c480ad84818fd7d63bce1f45bbdd9cc31499e56f0296e49beeae1922f819b25" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="89841926d6a8b393978e4954f3e7bcd5b737a54b644221c6ab06091d912bd879" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="ad872bad5871dbf30e3adaf4753af526c6eae746d42cb4f89e788a94febf1473" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="9bf515e8757e3168465ff874826a1537450d2931681a4b778777dfe19ac19e7e" name="java-1.7.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="aef10abee3e73c6f63817e8e3e4e5bcf882935daadf3fa84909d8400b79e8db1" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="19302ef0a295b7b680757f20a64a5311cfb1a8b402e3f3abf1f62d8ab9a9dde2" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="88a5141cb7cc530a34128391a6a4ef3ac844d40b95af6f8ee1e7d948a8340ead" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="39681e4afd67b852d82609127d698a114ad537d8c6d94b2e9db9ab05a23e7862" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="209c2126a3f813aa4a92e3885781ca4f7539a53ed45c34fbcb15db84eb5bbc9d" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="a7384c81ceb282d86248fd8313737f473548249105ff5d64f7b68ec56c902602" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="7e319f273a4c29370bc6023e24135f53d1c47a628288d860dd99ce65da61731c" name="java-1.7.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="bedfeebd668d3b475cd9790ca8d770e383c9d4e9b6a689d073c63346937f0769" name="java-1.7.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="b84390e8eacb24e3b85f7cca4238ee6717b0e24afaa844b15851b3fea6e8f9f6" name="java-1.7.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="ad0337af250707e87554ebe8e6fefcc92a5ef51ce91b1bede8d87f3a067e4a2b" name="java-1.7.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="999549ae570bf49338d23676befa1c7e672a95c06daafb1b1518429114cfd8da" name="java-1.7.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="2d9a3cc3ff4f3e8427f3bbe7140e5aa9405b6adaeb922edd60dc29ebcdedeb4e" name="java-1.7.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="f6f4682679a31c52f2d5fc54c177e5f3b98f796f4db974702cca0be5d2366aac" name="java-1.7.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="69b4ef05b20f5977256c3b56ec122e41edcf3215d90e77204aa4fd32a6245b5e" name="java-1.7.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="6715ec8a2337441e03564034d7e767cacdbf4b4718877032eb94265fe17feeb5" name="java-1.7.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="b7a5a60e96333cefb0bafd00e01381dc26fe1e866bd0f2bbe5ead856c6645206" name="java-1.7.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="e0a6450f3ae5c0b597555fd04a056e44e7c6232b25d68ad94982f8a7501dedd1" name="java-1.7.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="8663b9e7ea0a4d3114fd4ec3a782932af0c5eedf36397f61aa0635e67c819e5a" name="java-1.7.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="ed6a1bc51795027d9b50533f4182b45622c6b7304eaefd3dbb249b8cfc93f989" name="java-1.7.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="7dd2c1ffed91601284b44848b6db8b51a9aa3534695e300de41f15b7a5924b91" name="java-1.7.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="38b1a758e1e024e385a9db09fd0fc5ea44f90dea6bf307f75ff46f607ee157af" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="ab5bc22898ee123aa4edf3d7d435a5dadcf95adde900e2c4d27ba20d78d05317" name="java-1.7.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="ce84a8e0cd0d694aad68a6fc762b4bf961e82ae4f7e94f2414230714043c5a6c" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="fc55c3b3d2d2d7f965aed160edcbc3d2a29361889d5f663d1073f250edbcfe9c" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="5fc50b381b9c2e6346a6ddeabae51d50fb0b53bac5a0b02df95c9566daf34cae" name="java-1.7.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="a2410fc07860f39d8298cacbf5f942449738b46581c41c6ec07c7d94a013f15e" name="java-1.7.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="f6072f81b7f6093838c33bfe66c7cfb2cafe5ef29aa66f10b4230dbccc08174b" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="1326060e66766c8c3d4cdb9011ffa0b743b8c56ee9f4219d04f7bcd2eeb41021" name="java-1.7.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="7ad302736db8608501c32bbb3cfedca8b95f418ae6d13c3b1b9a4618773bd8c3" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="5af2d92330cd72a424ef8a68f70554ce87b1265498d1379ab9b84b8ca45bc627" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="4c34d86de247ece22e8dcd33c3cb58fc933a836f89da6542832bdd7257be9d89" name="java-1.7.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="cd4ff70a3852818c8a8338564c2d026e5065528146b1a457acf17ea4c9ebc595" name="java-1.7.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="ea1178ce805b270d9bcf6295574a4bc303dc25957d16f098d7cbe4c5b15b8d54" name="java-1.7.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="ba91040f1fd298953e74261c3c4d07b826836c21eb126dd12c76e134232c5f01" name="java-1.7.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="02c9a9954b3cdcc36762f5923215a203a97e3de90f2d3c57ca05ea09b2e0ba81" name="java-1.7.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="072e75c38de0904a2673ccff6ab7d045859a8a43bd30d978157f194616c06d09" name="java-1.7.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="28b8effef9f70744dc9896264d6cf20deb30c97108ae5ff724f4a49be871fd46" name="java-1.7.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="30616525f23ffcc020f95f6ed6f1479da8468c06de1f006d4ebfefdd4acabf42" name="java-1.7.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="608dd63b347f7f54e990b0a305d57b6a2d50105b223bcd3f8bcee2c6b2d66864" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="f019fad320724b03c0ddcb5b189bf579de43eee865a1b08bc2f70f1df583f43c" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="b4355b2c20cf182a7eec16e63ddc48ad6ced62db8979c99291e0525f62bb9586" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="cc403229c1e4ee7556f8ed9ada421fbb89e59c6644a3b34062670b29ba1010d9" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="e50c2bb08702d331acdbf286294174b66de651804b9f2d5cb80d075b50af60aa" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="46c1064228b0de7f2a8cc47247fc8cd298c45c24c1580bf1cff0a84c7eeb248c" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="d1ddfe51d0766b91cdb5c8c51040a20471a65ab0ff54a80ce40a8d13fb33691f" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="7f5041b7ae3268d3180d5359cfe7b0a6fa317786cda17d32ebcb71634c8e9e01" name="java-1.7.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.2.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="930503574a82c4de261bbe8f54c5860e9a588f6d57f3291ee53910e52aaf3278" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="16db7856c4a46328d40a5de3aa047512fb8aa28a126b73ac185fecc92463e20f" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="e0387c8bdeb2f7fe98e5ec4df49a58aeb9e8d5e670f33bd4256bd7d5a9d74077" name="java-1.7.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="214da5688fba8e4ab87aaba78a68ca3a7f565252f30c292873af98fccbd2ba9f" name="java-1.7.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.2" date="1541592000">- Bump release so y-stream takes priority over z-stream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.201-2.6.16.4" date="1544184000">- Added %global _find_debuginfo_opts -g
- Resolves: rhbz#1010786</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.2" date="1553860800">- Synchronise Requires with java-1.8.0-openjdk
- Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
- Add libjavagtk.so and libmawt.so to _privatelibs
- Remove duplicate fontconfig build requirement
- Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
- Add _isa to NSS requirements
- Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
- Resolves: rhbz#1608957</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.1" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="fbdfb6e9f5b6dfc72f3184107c5d4232ab5fb0a708cf3da0c0d189f7a8bf8127" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="aec448cf791c877445cc93010ce68c302e7ef490b6a288cbbc09b9e6f13506c9" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="511de77296fb9d582f3cdd21f3da8c37da8f4eb81868d23defdcb9a1e56f9e48" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="d7f3144d067672a7812ed388126c4be81d2a0ecee58e23b21020a63c923b54aa" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="54fe3a0cc60207c0b58163e01622d6b5ef451898b32070f22f7af6529cbeba2b" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="d8bbb24842e2dc421bb18e27f171befaeab5de52d4229eb224a425c145ae2568" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="e2eb4c5c71e1ed445719198b6aece5a43d8fd6fce850b12b709a4f8a9dbc6b30" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="dcad19c269fff938dce3757789e1a243901f479f82a6e6318f295b5671143bab" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="ed352f576e1bece6439a221bb0cedecc596d7b16cbdc839984ff87431e9b67a2" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="6da85f02b4403a942ebd8bc9f842ce54afb6165a07376cf8ac552cc266169260" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="58432b7acf00ec87ac9a308877eeef02c303a9247a31d8c798222a7cce65c902" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="57b2d72d40943e1cc0e183f51e51e1fbd1dbcb55147ed98ce57bd618f06e5b33" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="467c711b297d788843aa5098f43a1a6f0d235e9aab6ca2052fed87ffa0bc2767" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="2758b9a4aa2a55f8a4d04de9f9700ddeddb87fd4d2c74a0696bd06d599f82430" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="8c3645f95187312194a0ef1d7ccd987e1208f415ccc0db00d2a8e13eace2fb5d" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="ade60611832b2cc34d5bfb5facf64a0c3fcdd6acdcaac0802c7c0ce96fd3a954" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="8f9ddb7d636e056be8e0379503259ee1a4cc57662d91ed9e951e212be99608b9" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="337c8b242586d06179191827f485a104008d3a779a3831f53519fcc85e7c360f" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="60656a6cc97bcac57dcb679ca88e73eff93f99f8fda4ffeaf31affab4035a544" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="b98ab9003d5df50797f214497dad7680082df608e03593040d589ea348e34201" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="42da156eb0b170d18dc885a6dd2ac519879654e76f455e5bec1d99861a2ed4f4" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="65588ddbd9c11c2b0e1df3531883dd4d85fb5d7197a58c2d6c26b104d5a7317a" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="34e36bf5e49a10c6bba128310953e2211c437de291b7b77f8cd5ac19e5cdf863" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="1dcf91b713a03fc51297b7aa751bdcb1bd45af9da567357043d6b167326d0acc" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="ab58f0e37fd86f0f2f637bb445716d19e923227fbdb077712e7d55f56920c956" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="cb84b822108ff7eec482e80ea4e5d5d07761f46f58d0f9e4c130f9c8863a6cc1" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="78701438d06107896386708c6f49fb0ab5df37403166dd839bdbc7e777045eb3" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="09ea511cf485c3fd6253ccae58394986b450d00a4b389c5c5710af1baedaf9e2" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="9dff66097b3899fa60e853a15197977c370274ecedb85c1062a317120c39e721" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="a026850c8d0e9b66d683483a8ab3df2401e7773c4212f8cc4bf9af402ef96131" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="009bd406b31ca0f9619e765bfd7ffdc156b53901d78cd4f1a8ac364db5b4ed37" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="7e394f25aa2e130032764ffc4e617631bc53b67a7e1a89d504c99f88de801c0b" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="d83167b26941f0a2714a6eadc3ec6f239523ccadfc41a3fafbb8d97ee42d4081" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="1121f8b2aa3932530af0cb29a4a8d30aeb4359c276082836c059918a24ae44ba" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="838b504ca4607250edfdd3852b7540423244bf8a540845fc2acff0e9963209c8" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="4cdbfc35e72f43950180012b888f849d317a480c8c304e6cee0941467bff762e" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="4aebdffc185aa860ae982e3a45d3f41bf870c66db29dacedd34567c13c2205ae" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="e1d5cb3b81d77d2cdf42fd30addac0f77e2a16c60041e61abad9aabba7ad20f8" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="fe54456a1eb16cffbf69eaf288504ff03df0cf0606e2e7c37cba4d1c333db85a" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="a48d29a591d3807d1803aa6f8835a6ee15b95e817c11dc62098806afcfd091bf" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="e60226fe8be0095d3540a1bf9a925423380e3eab904a28866d6d9ca57a2d98cf" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="6ed14a1ad496f80f55bf2d4e119b499a9ca9652591e7defbc2ed97d491c120e5" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="876a9489a5a3c893b777ad2ab855816a4a7dc41df874bb654ee3caaddc1ed95b" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="4f24c8dfa7986951306ed72f396c42e38fd2ea9bf3aa46bae043a5d2e1c61db5" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="7400ec1d3b242dfe7dc52379d38617ce724e501c4af7b2f2b3a56b7e74a74f84" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="73a61673a95eb2e6c87250c9edd8c9a97743840058529b098134a1f5c404fce7" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="0a07d10a5824c7f9e4d47701c93cf78947c384068fd204f998ba9f0007a4f7b9" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="001bb99992339ae6b1ed89c1b8fef1c0c6c57e845a4c4e4d79659bf7f04c6004" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="5551c9cc9d1f3901bfd30b2cb796b51c6f3adfb275ec174193e36c3b9bdae4a1" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="afa08d3a66edf220846f098b065cfa634f24ae235c40334d2b9330b2e9c5b5d2" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="c18188961314f925584ead14fa52ad3713ae1643d2d70f5d46375460b782465d" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="a42b6d92a106e6f70ec673d967130d4c65ba37abae45b3ca51172b901fbfabbc" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="7f7bfa5c4f4db9ff8bcdb09f7563d16bfbd5034508812bcbae18305dc76defb7" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="1f5c304b059b815fd12ccd901ac366d8b0ffdb5557ebc438a8be34d67af02a58" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="3516d509f2b8188cc896bb03428462ce5571490fc38190a316ca1f9c733b2681" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="9624438477d2890ff4a94d1119532cd6da4181314eb01aab33d2d817f32295b2" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="18dd711a2f6bbca59a415797dcec0f850fc8f0a31e957c196ae5815b91f4a134" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="1120157166b884e12e83b6e3519b55a490bd890e7004411336129a8c5b02d877" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="a5dce6c999c92d18b8661140dc2139635c2d032f9a1c6492ffedc83f2c19c2eb" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="e2e82bc202f8d13e032686c2b52adaa45be2eb1fda857b9fd47e0dbd68c79d26" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="4ecfa034437eb3f9a529b95213e71ed275d1f6817cbc8d3fb55460c37952544d" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="b09eea51d05c063427d19de5b1f40cad98487185ee80af89a7df8adbd66bd09d" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="1fa9044e11137df6eb1552bd0a08222e9d529bfd35b18c28e29299540b1f5cb3" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="acc4b85d6485af4c17acc553dbe8b9bc36b3f27f72e8c3216ddc12d71588bd12" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="2f605b636658247efad8745111ceca6074361916710ea899b8c7fa445fac6c4c" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="98c06ba1fddc97b01b0dce2f79bd1bb79a4aa13860a85cc81dc3192715bcb8de" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="e7f2262d3b68d65c294715f5dd4c37631a8d0a31b2bc6ceb21d1a708bd3a7de9" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="1abf7265d98a9200e8e93db9dfdc88a6355adcdcb2f5b3788b83886db253e3f7" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="b3561d78bb4cb42e3047391fdf788f2b8bd5962cae5467cfd01e293b3ee67ad3" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="14a72fc7ea5f61522a15a287d5bebbffb727151764b59794b7e27eb12265817d" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="bb142b2134f0fe426636ee44d3198a71437fe747f082478b8f8fc882a737e144" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="001664b3bf3d5188600774e808246a83e6557c8fd1ff373e21a2b81a95e1339d" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="6b0fd2d4bf43d020baccb874b3fc6f0648d19ca209602e14dcf43e395748fcb1" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="11f94982f8504086717b825a8ae71750fce7084672de142a2f706dbd03299f6a" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="2de0e115745183782f24d4f0e162f29f6ac7d0c9722e2a4d893a444590b8049a" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="e28fc136b9fca79afbf2d773f81f59215446715c90e7ad77ca905be965813bae" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="477cfd6a96a3721cd33f3530bba986cee98b93ed3c0918aec32ccd3cb767eebd" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="318db6931ed3b78a4489aa2ee338d2d1959283bec9ffe9f16b51409ca53a685f" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="1eaddb1627e625edd70c679232e83aed8de697522ad5c055deb0212fae0f1e92" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="be93fbcfdb65eb56e3d9d6ec61c9f663efdf4cac5b18b4095255000cf7fdd20b" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="f7df14f5d2a2004542726bdbc70fc1cdd2b7c8876f80b92555147df0e657d486" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="c6d0d600ce855e97459bdf0f4c266cc07a46dfa9f248021e1719c46dc4028cf6" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="fcb5317ceaf178f56d01c338dfff11b094540b9e684358633dfd372378a8a7bd" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="e3b0a0a731199b981136a6411312d349cc43ef8be847063df739a41cb5c12f71" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="d61badd2d2f68d034d8391f080a7c7d772c5ceb886d505328706f02c4d50ef89" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="f91321b51dc680c45fd0e7fdefab45d769fcae88855cdfb9512ef2f55343da78" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="209874e639656d307ec809c824ea661cfba9eed6e1068a2a584d786b4776c74d" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="7a118f109209981e771b6b7ddbe3171d93eb2523bee06c41b9b6af2cf1ee67aa" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="7244a128b1b8349cfe94a2eeee630c4b7bf6f8d2475b4905ceb7377f5fe1ee5a" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="da9d6bac8079696c359fed0f297a05c739c3c3710ccf36a6da6ecaf4492e1cee" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="fe892d79e02dd837280e340cf10d8a184c9e5e92d47d6f8a9c7b218e65d85eb9" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="26f34110cdb90c56cff23ec1cc2b0d4242ba8e55d8ef5f4582cb7fb09baf6ab7" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="beb32ad7d153bb85c484e45b918517e57861f2df2aebec3b3f2e2a24a3b7638f" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="a09714f7ae1c380529f25d941f0d3ae103ecfc10bd18e61a870156533c7805ae" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="77a1c6f6a2f2ceba76da8227a3de248c70b1248c2452feb9f7878056a97ea49f" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="6cb0cbaa58bf1738e99b5faa1f8550facb5d19b1a9bf7c82df744dff1875073e" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="e638ee079420ed4c67e7eceff4d31954b9eb5b5db0a28c68e27885d2cd302bda" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="bc6975863e764099ca9cfa83c327ae3f1faca70b98eaf471f1adf7ba020a02fb" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="16a43c8f3561c6a56141174d2236d27209359646ed634b2b7e0e92f3482c93f5" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="0973886b61feff8716eced1675a17830e92faa46ceb922e25c999bf0c753f5bc" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="c9e747ce7db20c3ae5550d2addb07e7c84dfb4773857b0f3baabb16d651e37b8" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="6e7c3710d03a34e1e7d7e45524b0ac8a8724e386b0ea2610761808609ca9fd28" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="a0b74a59c65597c5ff85fd6b1bec7e6d0b18d4ab7286a8291ba6524e30a62b1f" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="6fe0d1d3e1c40b56e9c4a63c9bc78d2276697f8b20382f68159d5aa8270a93dc" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.222.b10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-1" date="1559822400">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-1" date="1560513600">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-1" date="1561464000">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-2" date="1561550400">- Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
- Don't perform a bootcycle build for the debug variant build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.222.b07-0.3.ea" date="1562068800">- Include 'ea' designator in Release when appropriate.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068801">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="e09d6661a5f791267d9e52a57d4720d69844538a7d615140e8bd931a22ff07e8" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="3b947850c86b845f07357f26b2fb1320e043715f5347ce18f475c7526d6e5f09" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.232.b09" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.1.ea" date="1562068800">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-1" date="1562587200">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587201">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-2" date="1562587202">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-1" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b01-0.0.ea" date="1564142400">- Update to aarch64-shenandoah-jdk8u232-b01.
- Switch to EA mode.
- Drop JDK-8210761/RH1632174 as now upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.0.ea" date="1567684800">- Update to aarch64-shenandoah-jdk8u232-b05.
- Drop upstreamed patch JDK-8141570/PR3548.
- Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="b4f68afde1bbffdb7b21283d55f321e69802aacb3a1a40d24ccddec6b6a747a9" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="05f69cc59b5895e4afde238d82d10dd4b3e028cf1fd1211128a33912ac739085" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.242.b08" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-1" date="1577188800">- Remove CVE-2018-3639 mitigation due to performance regression and
    OpenJDK position on speculative execution vulnerabilities.
    https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.0.ea" date="1577361600">- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b01-0.1.ea" date="1577966400">- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b02-0.0.ea" date="1577966401">- Update to aarch64-shenandoah-jdk8u242-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b06-0.0.ea" date="1578398400">- Update to aarch64-shenandoah-jdk8u242-b06 (EA)
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b08-0" date="1579089601">- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 &amp; JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="526226b8441582dfab72ac1dec70db9f625c621924a8f5052c3bbd7f31485d30" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="7b5cec6bb450b101e31f2959fdcfef83ff39b70c10bca2895c9e002b30d1bcb6" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="dc4d359cbf7d500282d7896eba276cc048469cd94351ce65d9fae7ccf3c2e54b" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="6fab854196cc0cf5c18a150e723828ad40953e4272543cf103872e6c94803bc6" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="22713a4665f6259b52084251bf6087d2b2aada4cd177ccd6a317af748987aef7" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="c6c9af8728d5c598568c2bd1122978c69229df283dfd947548ff47d78bbecffa" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="5d4138a688143fa1a97662b1ff814e15d088cf5526d9e2c9b30c6627b39371c6" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="90e7f16b5f6202514ac379820f6eefc1ba6c8c8fcd51ba87291afd96d95ba112" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="cebec3f780956d1811762fef92a397f4748e809896c11bc3749d1b461ed39be8" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="a5bf2bde3e12bda1752bfe4ebcdf456cf14d73015f6e17d13598f902b4945eb7" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="ffeccdecd58ca6ed4aa80b800a7053537bcabe31d645e8e9be7bfacdeb169d54" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="21ca0c27ee983157cde49224504eeab94b4305bb971b3a80ae74e3f9aaee3421" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="2c6309cd3d0ec5d738360aa2605af3b09e76bacef1150b185b380e92323a7e3b" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="ebf807be269af3a68853bb843a004474896c4da9880a9dc4d42368659e62e4df" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="3cec297970113813bbbdba7192a3e379d5fceff5d5a7d114e1166abbee93679e" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="82341f0a49b9d2895267ff518d0d9d1a5f69fa73377ecbb7c2082bc66f1120c9" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="c1f2357344cbe7a81aa1c592aede54ae2ddcc00d3c763e91d9c73d6e100d59b3" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="c354af2b1446b6d7733814658a18f716958caed24584258adbc966e99b46fce9" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="41c2a64f65312c40db53dc1fb4cf93752527c38f278864bbef46d60dedcb5798" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="bc5c73513500a9c93cdabe0edf72d65bc8561f99f85d77277fb6ece22d464176" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="ba40dd5f05f2ed49e804a63618fe8cf5010ecff868ca12b737dfcae2d22f4463" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="385a0c762370b553885da0c182fdc098e5a722b030ece86d69c1fcd19e1f17ef" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="bbd28e73853bd71d4bdcd89ecb9f4b8bce1004c3ccb5b0a643615d3b6ceffa30" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="b6ff4e370284ae47cdeb552b3fb3de342dd29ee70e9c8c39bbfad66407430e16" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="bb4b07e7ffc7916a8b1425aaa9f49df732504f7d046aaa590641f3b27220efee" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="09606d7f9080b269812c629068cfaf54e8335a1528129ee540cbdda98f6aa445" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="12bfa9a9d83c9730727eb3b8d6b5e4c0a860e1842e15b8a7e14d4129aea0e1e7" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="9e3f86c6431de8388a6706b3f5a9ca9b60571d6f675c120ae39aa21afc1058e6" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="ccbcbba2384e0b3cdaed3e2a7de4629bd886c3e667e93419980748231c4bffae" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="4b21e8ea16ee01e2f3681f6c187317d46e938b12f45b8c965a87da4efce58787" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="9a6b8312dff672d0bfc9b5de6dc0b26f1bef3ef85f3276f204fa4aaea9deb7cd" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="4ee923898dbf7561fc2492156575e58e03ab74b3cd6578e47681d93048a31786" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="47c7d57ebce8de97c82495b3308f38dd748c642c0041a5e61c63405da533458d" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="dda32c317c2f4eff882bacd141f6fc1604c7eb0145923b1323387c21ce0186e2" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="a1c0cca705191f5e729de925d51cd836d8ee62cd007d83c2f570bbd563a29c62" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="2b3e162d005c63a1130040ec522fa5f0b2e0d857463ac9e854098eb59bfe0f2e" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="d6562ad7bf7ea45686fa342017216b6f8d7dcc91ae721bafbd227ffb47569c9d" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="141808a8852d96eaa90335c48738f560dc41a62635ca9a3f868a8c7fb4f14ef3" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="d98f89f821ef9489edb4e0a57e8d6fa70c897dfc25509bc32d0fe2c3e0dafe58" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="28b719fcb40b46877876386d836cd74465f81eb991017fb058c62def5ebf6306" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="26c000623a14d17101ced5c42b27c39dd08fdf617f440828116bfd8a9657ccf0" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="8f1721f65ff0cdcdc441b2f4f1b613fd49bbac7137bbbe141f975d3ae6257a5e" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="86084d381968e99b97e0bd1d854ab166e552e61eca0deef9138c9dc0b9dac6b8" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="c461a62342626404c98e81f06e62c23f4d723a93f537475f6331e2282187ebd4" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="4c13049d8ecf9ee8334058d1a6eca363319bea1d95fe12cd44e36d26a2cac34f" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="743e6e21cb961280703f083605933cb0921bb65fb1a5dcadbcf712c467a7976d" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="3b532654e1d22eb88acca5c59c5dd83b0b8e538948c12434cbd9d115877c8fb4" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="33a2c23cecf159447073c552918772e8dddc7a69c466478692b516b95785ac37" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="162857c47369176785f2726a0ff15f6d30bfde69fc5e696e5d8fb41a2440b3a2" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="463aed676aadf3a062db7ce06ddba504237ffca930779b666f12ff98230dd402" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="1c0ac4877475f6cc2bb6871289548ad57e14d2244957118335d711ad1ba4bfdc" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="d4bdfaa10064387c3179c77fdda1050396445ef18a0fadce98c78818de5f76a8" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="2ec6b5997192c836737a30a29ddc5320712d84421cf70fa1e309bd6561aca0a7" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="a3d34650a2056a076ac7df27df81c116c2d392509bd1ba544b36c1fd73ae7263" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="1c6a7814e77296787348b14f54fc67921c9b4b1b747c910c305df4b6bddf11e6" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="59be67e0f095931ab1a01d6ca40063c6cc743d9ce0d2362aa568fe83690f4bdd" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="e8f00d5b924b46a96e31d8ea9b3bc552a2281c49df4e1e01501ae01a5e97cfb5" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="d83b1b91241c002075fa7f4c68917991f167f82a08292f087ce2ae9ed65011dc" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="90c5fc43728f752e031399d710d9733a4aa476b1f7a8b611523672b2bf6b0cd2" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="ea391e320f85d5724674733f99f4e256491f0e40faf62c76a6c3bbfc6a10ab10" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="070543a2d379e173142184ebcd7c518836b1ddef7fa97ff03e6d805367054664" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="82013ca1c0b1da767a60381474bcb9dbd8d844021e5de7b108b668be485f7285" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="21303125c12bb5df1bd387f9c3923343a0e2d088ef4da02a355d5703a9f7755e" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="b7806272c2846ebd8a6e17fad749aedaedadfeb8840e8ed669853761f665b4da" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="0d8a890dd03161f552087b301dd113a5b675d99f9871e8c954d2de0cc1139140" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="af6429156ebf928ab5596a99bfc15431345c221cc385f534bc5aea4d11227c2f" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="0f84b2dc4712a35c61267ff940a69cc631a4966ee8a25c7c47991e16a2e7fee6" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="66cdd79c524dbbcb2705486b90aaaec1315f8361978cd30affce5f7ee16422a3" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="522b4138b7bccbfb990ca67e86d47522dba2c2db749a1da2ec86465016940859" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="8553c9ffa37c1a3e65ead44f96ae708a9b9e010965dfc7c4d3074749177e02dc" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="ee6735d766da2a80718908c9615b733a3cb92ce51d040db351f5947540c56c16" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="bd239ddfc405f9947c3439d8de7f621f5b134a71cf7a8231d3c74a9307c81d87" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="dc1494c263608d9bee449d03da4fc18459bbb7a6f0378895078afb0e8299f60c" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="92b5a22922e8a85350f14ae9f533519bbc478d44009daac21e3b95b94a6f5035" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="3f5eb919b15f75907006fa844ed9aa6b9a421ccb7de350968dc526978f87b7e1" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="8813c5bb78c35a18f6e6b51e6afd2a841161148f42a0421852b3a52860d534ed" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="ab63de7f47efe4a042ccf13829b22d3ce5d49fad696de2b2d59a170b674c70a9" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="c7dcf1551bae22253e2c08502c43eb627a8930d2a12c45376f588939b908b697" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="3bd2df0b0bb58644dbee1f691a63959e04520c3425e468d766fe0b5a9f569729" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="83ee432e4579f0747b3b75be5a1ac769de0c35b6df4dd5d290b475c4391a3fb2" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="6359dc3b2637e20f346bfd53807a879b6112c9de4e71ea359be13ef33832ed27" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="d3682b945f6838181880246c883fdad1299c794a7b5a8af9f88c91a54d620f73" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="db94488bd7030efdf542ecca471b7a3a55ddd233f9bd2cd8492f556909879724" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="1e3fcf8798bec1014848f14012f10f5d68404942b4de2d3e98e5f74ea7f265e3" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="020bd7e395816747dc3c47c1d7b5fbb6b30ca2d29dce9bc9ac6569e44442d9f7" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="66b90c66e829a16a48708bcc4f60e517cbd401ffde78e7ee0118b4f9d71e76b7" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="404e22403e4b575059337c9229a3c5bd48c6a238a34c3ced7dbb0f3514477877" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="fa074638fd8be5ac32e2ab1c540af86c94c281b03f53bc52997fe1f64b9d7846" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="30c102c6c9110eb5ca746c01be4fe5d691a4cbbdeb4d141a4dba87b453e59f99" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="aece0bddf325cbc981c847947a3c8b6897c258c620585e7dfb60afca5d4ccf3d" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="e64c89dc37d805d4eedb7198a5509a0b0acd48cc035b66683b55bfc8f3f57d44" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="7ea0557f4e8012a5ad24e3f566509760ea8d545490b3ceaef6855a7801461be0" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="b58ff20dde0e4c5664cc2a7a86037a8d598a59bebff5c459c3f6d16bcde03f4e" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="79fe82656d3a37c55315beb1b6fdb9a48b7cdffbf3e8753a4d9e1a0c579b015b" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="5e7d448f3387e429d12f0db93e2ff06c0bd6b71cc642196be478052a3fb1739c" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="b5ff66717f90baeaa3dd6a30fca8e27a19a6652ef7160b21af68db98fcd6a4c2" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="01119f292ee56c9ae2d6a57d167943d159ef3d6743893d5aced4a6592555b6ac" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="39ba135e8ff7ee1e7658dc3dfa7b4e1f232d8e21f98d434bee3935242c14d69c" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="8e81e2d413a5f24b44fb2c5e3ebcd02bab786e85376ded5f826e19285b79de6e" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="237304c5241639ae88a33bbf4814c65531f7c5346e81584697f643af3f744e00" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="2194b42dbe5c8f60e0531cbb34f1e86d903d6c027a8f57cba01ed4c001c1ba90" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="c71b2de93e8ccfb5d16290dd68f5a895fa9ec861487a7ff07732d53ceabe5292" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="a851c6cdd6191c89e014a76fbb0fb8c9a9e9e4cea3568b316d45a00bdec21f86" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="25d448ea5ec5536106f43877702eb48e281002533f9643f5ccdd2a99a19f0c58" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.4.11" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.3-0.1.ea" date="1561982400">- Update to shenandoah-jdk-11.0.4+3 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.1.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.1.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="3525414d6114e796b5f6877a5971f409bea9352a0378a4300eb9e21f27ecc373" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="7c4984afea0d0399813ee8c069915771b67ab920f4574f183a4c7b93abb81442" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.5.10" rel="0.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.1.ea" date="1562155200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.1.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="add2d1834d5e944ba62e3cdc1d32d2db46edf912a5b8ac2d45bb79e317863c8d" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="bbe68a4b8cad28dbdde1a07059ee86c60aabf3be6f66cda0bfdade455fa3481f" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.6.10" rel="1.el7_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.1.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.1.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-1" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.1-0.0.ea" date="1565611200">- Update to shenandoah-jdk-11.0.5+1 (EA)
- Switch to EA mode for 11.0.5 pre-release builds.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.2-0.0.ea" date="1567771200">- Update to shenandoah-jdk-11.0.5+2 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.9-0.0.ea" date="1570622400">- Update to shenandoah-jdk-11.0.5+9 (EA)
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.5.10-0" date="1570622401">- Update to shenandoah-jdk-11.0.5+10 (GA)
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.1-0.1.ea" date="1576756800">- Update to shenandoah-jdk-11.0.6+1 (EA)
- Switch to EA mode for 11.0.6 pre-release builds.
- Add support for jfr binary.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-0" date="1578571200">- Update to shenandoah-jdk-11.0.6+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.6.10-1" date="1578744000">- Add JDK-8236039 backport to resolve OpenShift blocker
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="3a23e25bd60edae2e4cca71ff3b30dffe99a41fb7356b8b9ac8b6c460e952a91" name="jss" arch="i686">
  <version epoch="0" ver="4.4.6" rel="3.el7_7"/>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.3-1" date="1522929600">- Rebased to JSS 4.4.3</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-1" date="1527595200">- Rebased to JSS 4.4.4</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-2" date="1529582400">- Red Hat Bugzilla #1560682 - (RFE) Migrate RHCS x509 cert and crl
  functionality to JSS (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-3" date="1530792000">- Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data (cfu)
- Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-1" date="1552651200">- Bugzilla #1659527 - Rebase JSS in RHEL 7.7 (ascheel)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-2" date="1568203200">- Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com 4.4.6-3" date="1568289600">- NVR bump</changelog>
</package>
<package pkgid="02bad74ce9ee170944b2fbcac3eb6df3a1e36fd0ca6f47c8a174e8c2e99dce5b" name="jss" arch="src">
  <version epoch="0" ver="4.4.6" rel="3.el7_7"/>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.3-1" date="1522929600">- Rebased to JSS 4.4.3</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-1" date="1527595200">- Rebased to JSS 4.4.4</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-2" date="1529582400">- Red Hat Bugzilla #1560682 - (RFE) Migrate RHCS x509 cert and crl
  functionality to JSS (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-3" date="1530792000">- Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data (cfu)
- Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-1" date="1552651200">- Bugzilla #1659527 - Rebase JSS in RHEL 7.7 (ascheel)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-2" date="1568203200">- Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com 4.4.6-3" date="1568289600">- NVR bump</changelog>
</package>
<package pkgid="2e959aa36f3ce4d89a72325d4d15428799534d27413051e7a43f0a3b82941cc7" name="jss" arch="src">
  <version epoch="0" ver="4.4.6" rel="3.el7_7"/>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.3-1" date="1522929600">- Rebased to JSS 4.4.3</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-1" date="1527595200">- Rebased to JSS 4.4.4</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-2" date="1529582400">- Red Hat Bugzilla #1560682 - (RFE) Migrate RHCS x509 cert and crl
  functionality to JSS (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-3" date="1530792000">- Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data (cfu)
- Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-1" date="1552651200">- Bugzilla #1659527 - Rebase JSS in RHEL 7.7 (ascheel)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-2" date="1568203200">- Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com 4.4.6-3" date="1568289600">- NVR bump</changelog>
</package>
<package pkgid="8c302588535898f585a2062dfd18f6ba94ca7fa4a5c82452f65f4d36bb222d56" name="jss" arch="x86_64">
  <version epoch="0" ver="4.4.6" rel="3.el7_7"/>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.3-1" date="1522929600">- Rebased to JSS 4.4.3</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-1" date="1527595200">- Rebased to JSS 4.4.4</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-2" date="1529582400">- Red Hat Bugzilla #1560682 - (RFE) Migrate RHCS x509 cert and crl
  functionality to JSS (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-3" date="1530792000">- Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data (cfu)
- Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-1" date="1552651200">- Bugzilla #1659527 - Rebase JSS in RHEL 7.7 (ascheel)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-2" date="1568203200">- Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com 4.4.6-3" date="1568289600">- NVR bump</changelog>
</package>
<package pkgid="95e483d1156163b518e3d1960c8495d55e2905eee526fcaa8d3c8e05ac3d09bf" name="jss-debuginfo" arch="i686">
  <version epoch="0" ver="4.4.6" rel="3.el7_7"/>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.3-1" date="1522929600">- Rebased to JSS 4.4.3</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-1" date="1527595200">- Rebased to JSS 4.4.4</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-2" date="1529582400">- Red Hat Bugzilla #1560682 - (RFE) Migrate RHCS x509 cert and crl
  functionality to JSS (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-3" date="1530792000">- Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data (cfu)
- Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-1" date="1552651200">- Bugzilla #1659527 - Rebase JSS in RHEL 7.7 (ascheel)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-2" date="1568203200">- Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com 4.4.6-3" date="1568289600">- NVR bump</changelog>
</package>
<package pkgid="8d659bb2d234a415492320a162462ece0e847ad51addfa13c0dd0d262e715bd2" name="jss-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4.6" rel="3.el7_7"/>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.3-1" date="1522929600">- Rebased to JSS 4.4.3</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-1" date="1527595200">- Rebased to JSS 4.4.4</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-2" date="1529582400">- Red Hat Bugzilla #1560682 - (RFE) Migrate RHCS x509 cert and crl
  functionality to JSS (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-3" date="1530792000">- Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data (cfu)
- Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-1" date="1552651200">- Bugzilla #1659527 - Rebase JSS in RHEL 7.7 (ascheel)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-2" date="1568203200">- Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com 4.4.6-3" date="1568289600">- NVR bump</changelog>
</package>
<package pkgid="654d3dcd3a154483fc522a92805f7f683f957ecb0c68c4e4213c107431084fb1" name="jss-javadoc" arch="i686">
  <version epoch="0" ver="4.4.6" rel="3.el7_7"/>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.3-1" date="1522929600">- Rebased to JSS 4.4.3</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-1" date="1527595200">- Rebased to JSS 4.4.4</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-2" date="1529582400">- Red Hat Bugzilla #1560682 - (RFE) Migrate RHCS x509 cert and crl
  functionality to JSS (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-3" date="1530792000">- Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data (cfu)
- Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-1" date="1552651200">- Bugzilla #1659527 - Rebase JSS in RHEL 7.7 (ascheel)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-2" date="1568203200">- Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com 4.4.6-3" date="1568289600">- NVR bump</changelog>
</package>
<package pkgid="889c863c5258a5da79d98648c4fb47f4ca4f47e57882681ecc410f44d4470daf" name="jss-javadoc" arch="x86_64">
  <version epoch="0" ver="4.4.6" rel="3.el7_7"/>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.3-1" date="1522929600">- Rebased to JSS 4.4.3</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-1" date="1527595200">- Rebased to JSS 4.4.4</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-2" date="1529582400">- Red Hat Bugzilla #1560682 - (RFE) Migrate RHCS x509 cert and crl
  functionality to JSS (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-3" date="1530792000">- Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data (cfu)
- Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-1" date="1552651200">- Bugzilla #1659527 - Rebase JSS in RHEL 7.7 (ascheel)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-2" date="1568203200">- Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com 4.4.6-3" date="1568289600">- NVR bump</changelog>
</package>
<package pkgid="a9fbeb5e2553d5887361055be4ff4755d5b2efb26db47e18bbe35d990d68bff4" name="kde-settings" arch="noarch">
  <version epoch="0" ver="19" rel="23.10.el7.centos"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.3" date="1375876800">- cleanup</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 19-23.3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.4" date="1393502400">- exclude kdm</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.5" date="1415966400">- Resolves: bz#1124472,  shell namespace pollution</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.6" date="1505217600">- Create ~/.local/share folder by default if doesn't exist
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.7" date="1505217601">- Fix the way we patch kde-settings
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.8" date="1527249600">- Fix upstream URL
  Resolves: bz#1501830</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.9" date="1552910400">- Check if we have write access to home directory before creating default folders
  Resolves: bz#1579764</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.10" date="1565265600">- Use correct tcsh syntax for config scripts
  Resolves: bz#1738491</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 19-23.10.el7.centos" date="1567512000">- debrand</changelog>
</package>
<package pkgid="0e1fb3e3211f2a2fa8fd825ad8268463b97a3b5f5b69d27f37f923fa500a31e2" name="kde-settings" arch="noarch">
  <version epoch="0" ver="19" rel="23.10.el7.centos"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.3" date="1375876800">- cleanup</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 19-23.3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.4" date="1393502400">- exclude kdm</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.5" date="1415966400">- Resolves: bz#1124472,  shell namespace pollution</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.6" date="1505217600">- Create ~/.local/share folder by default if doesn't exist
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.7" date="1505217601">- Fix the way we patch kde-settings
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.8" date="1527249600">- Fix upstream URL
  Resolves: bz#1501830</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.9" date="1552910400">- Check if we have write access to home directory before creating default folders
  Resolves: bz#1579764</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.10" date="1565265600">- Use correct tcsh syntax for config scripts
  Resolves: bz#1738491</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 19-23.10.el7.centos" date="1567512000">- debrand</changelog>
</package>
<package pkgid="63aaf257f603554302c17b8c2d4c3f10c8db900fe35706569a9235e0178967f7" name="kde-settings" arch="src">
  <version epoch="0" ver="19" rel="23.10.el7.centos"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.3" date="1375876800">- cleanup</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 19-23.3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.4" date="1393502400">- exclude kdm</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.5" date="1415966400">- Resolves: bz#1124472,  shell namespace pollution</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.6" date="1505217600">- Create ~/.local/share folder by default if doesn't exist
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.7" date="1505217601">- Fix the way we patch kde-settings
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.8" date="1527249600">- Fix upstream URL
  Resolves: bz#1501830</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.9" date="1552910400">- Check if we have write access to home directory before creating default folders
  Resolves: bz#1579764</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.10" date="1565265600">- Use correct tcsh syntax for config scripts
  Resolves: bz#1738491</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 19-23.10.el7.centos" date="1567512000">- debrand</changelog>
</package>
<package pkgid="747d39be35dfce0ede1cbd14a55a56a3ae81f18253bad731d5f23d3ffcfe45f8" name="kde-settings" arch="src">
  <version epoch="0" ver="19" rel="23.10.el7.centos"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.3" date="1375876800">- cleanup</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 19-23.3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.4" date="1393502400">- exclude kdm</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.5" date="1415966400">- Resolves: bz#1124472,  shell namespace pollution</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.6" date="1505217600">- Create ~/.local/share folder by default if doesn't exist
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.7" date="1505217601">- Fix the way we patch kde-settings
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.8" date="1527249600">- Fix upstream URL
  Resolves: bz#1501830</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.9" date="1552910400">- Check if we have write access to home directory before creating default folders
  Resolves: bz#1579764</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.10" date="1565265600">- Use correct tcsh syntax for config scripts
  Resolves: bz#1738491</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 19-23.10.el7.centos" date="1567512000">- debrand</changelog>
</package>
<package pkgid="4167a1e9fff5d8524455cc497056ff7a7c2a598abc893add999ec1562743dc8c" name="kde-settings-ksplash" arch="noarch">
  <version epoch="0" ver="19" rel="23.10.el7.centos"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.3" date="1375876800">- cleanup</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 19-23.3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.4" date="1393502400">- exclude kdm</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.5" date="1415966400">- Resolves: bz#1124472,  shell namespace pollution</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.6" date="1505217600">- Create ~/.local/share folder by default if doesn't exist
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.7" date="1505217601">- Fix the way we patch kde-settings
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.8" date="1527249600">- Fix upstream URL
  Resolves: bz#1501830</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.9" date="1552910400">- Check if we have write access to home directory before creating default folders
  Resolves: bz#1579764</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.10" date="1565265600">- Use correct tcsh syntax for config scripts
  Resolves: bz#1738491</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 19-23.10.el7.centos" date="1567512000">- debrand</changelog>
</package>
<package pkgid="b704b9665600de9b1ea326315f1b9fca1bc78aa822a399777863858a1ae4f51e" name="kde-settings-ksplash" arch="noarch">
  <version epoch="0" ver="19" rel="23.10.el7.centos"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.3" date="1375876800">- cleanup</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 19-23.3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.4" date="1393502400">- exclude kdm</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.5" date="1415966400">- Resolves: bz#1124472,  shell namespace pollution</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.6" date="1505217600">- Create ~/.local/share folder by default if doesn't exist
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.7" date="1505217601">- Fix the way we patch kde-settings
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.8" date="1527249600">- Fix upstream URL
  Resolves: bz#1501830</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.9" date="1552910400">- Check if we have write access to home directory before creating default folders
  Resolves: bz#1579764</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.10" date="1565265600">- Use correct tcsh syntax for config scripts
  Resolves: bz#1738491</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 19-23.10.el7.centos" date="1567512000">- debrand</changelog>
</package>
<package pkgid="c1a2b1da74be47ab419c6ce7c884c0223be7dbf08e523c047261a10d1577f241" name="kde-settings-minimal" arch="noarch">
  <version epoch="0" ver="19" rel="23.10.el7.centos"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.3" date="1375876800">- cleanup</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 19-23.3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.4" date="1393502400">- exclude kdm</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.5" date="1415966400">- Resolves: bz#1124472,  shell namespace pollution</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.6" date="1505217600">- Create ~/.local/share folder by default if doesn't exist
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.7" date="1505217601">- Fix the way we patch kde-settings
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.8" date="1527249600">- Fix upstream URL
  Resolves: bz#1501830</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.9" date="1552910400">- Check if we have write access to home directory before creating default folders
  Resolves: bz#1579764</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.10" date="1565265600">- Use correct tcsh syntax for config scripts
  Resolves: bz#1738491</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 19-23.10.el7.centos" date="1567512000">- debrand</changelog>
</package>
<package pkgid="035e8b457606a08c3b97091541415e49af2423e9d696ac6f0094e6bcc0ed967d" name="kde-settings-minimal" arch="noarch">
  <version epoch="0" ver="19" rel="23.10.el7.centos"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.3" date="1375876800">- cleanup</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 19-23.3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.4" date="1393502400">- exclude kdm</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.5" date="1415966400">- Resolves: bz#1124472,  shell namespace pollution</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.6" date="1505217600">- Create ~/.local/share folder by default if doesn't exist
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.7" date="1505217601">- Fix the way we patch kde-settings
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.8" date="1527249600">- Fix upstream URL
  Resolves: bz#1501830</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.9" date="1552910400">- Check if we have write access to home directory before creating default folders
  Resolves: bz#1579764</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.10" date="1565265600">- Use correct tcsh syntax for config scripts
  Resolves: bz#1738491</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 19-23.10.el7.centos" date="1567512000">- debrand</changelog>
</package>
<package pkgid="6b5482bc382acfb176b3c4673789b63a15416be80bb0ceecb01235b6e629e2d1" name="kde-settings-plasma" arch="noarch">
  <version epoch="0" ver="19" rel="23.10.el7.centos"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.3" date="1375876800">- cleanup</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 19-23.3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.4" date="1393502400">- exclude kdm</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.5" date="1415966400">- Resolves: bz#1124472,  shell namespace pollution</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.6" date="1505217600">- Create ~/.local/share folder by default if doesn't exist
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.7" date="1505217601">- Fix the way we patch kde-settings
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.8" date="1527249600">- Fix upstream URL
  Resolves: bz#1501830</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.9" date="1552910400">- Check if we have write access to home directory before creating default folders
  Resolves: bz#1579764</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.10" date="1565265600">- Use correct tcsh syntax for config scripts
  Resolves: bz#1738491</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 19-23.10.el7.centos" date="1567512000">- debrand</changelog>
</package>
<package pkgid="b890eaf32ab43e6e0b9ca312aafa984055a9b85814d976bc87c94517034bd222" name="kde-settings-plasma" arch="noarch">
  <version epoch="0" ver="19" rel="23.10.el7.centos"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.3" date="1375876800">- cleanup</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 19-23.3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.4" date="1393502400">- exclude kdm</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.5" date="1415966400">- Resolves: bz#1124472,  shell namespace pollution</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.6" date="1505217600">- Create ~/.local/share folder by default if doesn't exist
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.7" date="1505217601">- Fix the way we patch kde-settings
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.8" date="1527249600">- Fix upstream URL
  Resolves: bz#1501830</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.9" date="1552910400">- Check if we have write access to home directory before creating default folders
  Resolves: bz#1579764</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.10" date="1565265600">- Use correct tcsh syntax for config scripts
  Resolves: bz#1738491</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 19-23.10.el7.centos" date="1567512000">- debrand</changelog>
</package>
<package pkgid="21008abad45e91694d24e95dffbcdf8625dff3290aa36cc37625ab5da7c52c48" name="kde-settings-pulseaudio" arch="noarch">
  <version epoch="0" ver="19" rel="23.10.el7.centos"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.3" date="1375876800">- cleanup</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 19-23.3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.4" date="1393502400">- exclude kdm</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.5" date="1415966400">- Resolves: bz#1124472,  shell namespace pollution</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.6" date="1505217600">- Create ~/.local/share folder by default if doesn't exist
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.7" date="1505217601">- Fix the way we patch kde-settings
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.8" date="1527249600">- Fix upstream URL
  Resolves: bz#1501830</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.9" date="1552910400">- Check if we have write access to home directory before creating default folders
  Resolves: bz#1579764</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.10" date="1565265600">- Use correct tcsh syntax for config scripts
  Resolves: bz#1738491</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 19-23.10.el7.centos" date="1567512000">- debrand</changelog>
</package>
<package pkgid="6e26cf2e40b0e91140a110043425c0d181f751522ab9d2b23e06fbdebd086b65" name="kde-settings-pulseaudio" arch="noarch">
  <version epoch="0" ver="19" rel="23.10.el7.centos"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.3" date="1375876800">- cleanup</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 19-23.3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.4" date="1393502400">- exclude kdm</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.5" date="1415966400">- Resolves: bz#1124472,  shell namespace pollution</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.6" date="1505217600">- Create ~/.local/share folder by default if doesn't exist
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.7" date="1505217601">- Fix the way we patch kde-settings
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.8" date="1527249600">- Fix upstream URL
  Resolves: bz#1501830</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.9" date="1552910400">- Check if we have write access to home directory before creating default folders
  Resolves: bz#1579764</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.10" date="1565265600">- Use correct tcsh syntax for config scripts
  Resolves: bz#1738491</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 19-23.10.el7.centos" date="1567512000">- debrand</changelog>
</package>
<package pkgid="f914ef7a4faa3603b1ef15cc60788cfdf6ba4ca216bed12693a7d99e2d18d395" name="kdelibs" arch="i686">
  <version epoch="6" ver="4.14.8" rel="11.el7_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-7" date="1549886400">- Handle case-sensitive mime types
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-8" date="1556539200">- Disable JAR repack script to avoid multilib regression
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-9" date="1559736000">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-10" date="1559822400">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-11" date="1565265600">- KConfig: malicious .desktop files would execute code
  Resolves: bz#1740736</changelog>
</package>
<package pkgid="bd5944a8615cc37b48bec19fc54dfcffc2ecbac7f8787827c7ef66489abecebe" name="kdelibs" arch="src">
  <version epoch="6" ver="4.14.8" rel="11.el7_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-7" date="1549886400">- Handle case-sensitive mime types
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-8" date="1556539200">- Disable JAR repack script to avoid multilib regression
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-9" date="1559736000">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-10" date="1559822400">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-11" date="1565265600">- KConfig: malicious .desktop files would execute code
  Resolves: bz#1740736</changelog>
</package>
<package pkgid="af94a0b24cb079ba93fa297b58632d5985b571a2d4e45e90fe4fc6046ab21a2a" name="kdelibs" arch="src">
  <version epoch="6" ver="4.14.8" rel="11.el7_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-7" date="1549886400">- Handle case-sensitive mime types
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-8" date="1556539200">- Disable JAR repack script to avoid multilib regression
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-9" date="1559736000">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-10" date="1559822400">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-11" date="1565265600">- KConfig: malicious .desktop files would execute code
  Resolves: bz#1740736</changelog>
</package>
<package pkgid="8ce174b58f6af3d3fa34a114585525adf6f644a9ec804b0a94dde1bc52ec55ad" name="kdelibs" arch="x86_64">
  <version epoch="6" ver="4.14.8" rel="11.el7_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-7" date="1549886400">- Handle case-sensitive mime types
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-8" date="1556539200">- Disable JAR repack script to avoid multilib regression
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-9" date="1559736000">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-10" date="1559822400">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-11" date="1565265600">- KConfig: malicious .desktop files would execute code
  Resolves: bz#1740736</changelog>
</package>
<package pkgid="75b28ad0f77ffd61967487f5027fc15caa71554c234f6280995a7f408e98d2af" name="kdelibs-apidocs" arch="noarch">
  <version epoch="6" ver="4.14.8" rel="11.el7_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-7" date="1549886400">- Handle case-sensitive mime types
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-8" date="1556539200">- Disable JAR repack script to avoid multilib regression
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-9" date="1559736000">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-10" date="1559822400">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-11" date="1565265600">- KConfig: malicious .desktop files would execute code
  Resolves: bz#1740736</changelog>
</package>
<package pkgid="d407daac07e79d30271ef2903f52f57b6f9a8a5d88366440ab387df37db9b5d2" name="kdelibs-apidocs" arch="noarch">
  <version epoch="6" ver="4.14.8" rel="11.el7_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-7" date="1549886400">- Handle case-sensitive mime types
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-8" date="1556539200">- Disable JAR repack script to avoid multilib regression
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-9" date="1559736000">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-10" date="1559822400">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-11" date="1565265600">- KConfig: malicious .desktop files would execute code
  Resolves: bz#1740736</changelog>
</package>
<package pkgid="623004573be1bfa4a37012c4fdd578bda3a2b5db4f31ed30236f77781aa7d0b6" name="kdelibs-common" arch="i686">
  <version epoch="6" ver="4.14.8" rel="11.el7_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-7" date="1549886400">- Handle case-sensitive mime types
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-8" date="1556539200">- Disable JAR repack script to avoid multilib regression
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-9" date="1559736000">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-10" date="1559822400">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-11" date="1565265600">- KConfig: malicious .desktop files would execute code
  Resolves: bz#1740736</changelog>
</package>
<package pkgid="58e036747b14b9c3d750fd4c3f5d294eb0b52a9bc22d480e84267d5496adf6f0" name="kdelibs-common" arch="x86_64">
  <version epoch="6" ver="4.14.8" rel="11.el7_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-7" date="1549886400">- Handle case-sensitive mime types
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-8" date="1556539200">- Disable JAR repack script to avoid multilib regression
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-9" date="1559736000">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-10" date="1559822400">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-11" date="1565265600">- KConfig: malicious .desktop files would execute code
  Resolves: bz#1740736</changelog>
</package>
<package pkgid="3731e81690d28930b7aca983dc2c7183b1d96582e231b51cf16d7ee713dc3dda" name="kdelibs-debuginfo" arch="i686">
  <version epoch="6" ver="4.14.8" rel="11.el7_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-7" date="1549886400">- Handle case-sensitive mime types
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-8" date="1556539200">- Disable JAR repack script to avoid multilib regression
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-9" date="1559736000">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-10" date="1559822400">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-11" date="1565265600">- KConfig: malicious .desktop files would execute code
  Resolves: bz#1740736</changelog>
</package>
<package pkgid="76bf52042d9d15ce8677501e846daeab1f785a6fc36f6e21520313a1e526a027" name="kdelibs-debuginfo" arch="x86_64">
  <version epoch="6" ver="4.14.8" rel="11.el7_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-7" date="1549886400">- Handle case-sensitive mime types
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-8" date="1556539200">- Disable JAR repack script to avoid multilib regression
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-9" date="1559736000">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-10" date="1559822400">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-11" date="1565265600">- KConfig: malicious .desktop files would execute code
  Resolves: bz#1740736</changelog>
</package>
<package pkgid="4ad091c22d1e2d6e18872e3ca2ece03cc9ca6ab4ffc5d86f575cfad6b3368ca5" name="kdelibs-devel" arch="i686">
  <version epoch="6" ver="4.14.8" rel="11.el7_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-7" date="1549886400">- Handle case-sensitive mime types
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-8" date="1556539200">- Disable JAR repack script to avoid multilib regression
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-9" date="1559736000">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-10" date="1559822400">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-11" date="1565265600">- KConfig: malicious .desktop files would execute code
  Resolves: bz#1740736</changelog>
</package>
<package pkgid="6a5218e24159b23607a6f40eb235a866df760c1fb11bb9ec94240b417cf1d6ec" name="kdelibs-devel" arch="x86_64">
  <version epoch="6" ver="4.14.8" rel="11.el7_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-7" date="1549886400">- Handle case-sensitive mime types
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-8" date="1556539200">- Disable JAR repack script to avoid multilib regression
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-9" date="1559736000">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-10" date="1559822400">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-11" date="1565265600">- KConfig: malicious .desktop files would execute code
  Resolves: bz#1740736</changelog>
</package>
<package pkgid="cc3492c86b6604d42e1c119f83486bbda0cd3c8e79b658483d9ca8b609b6cf45" name="kdelibs-ktexteditor" arch="i686">
  <version epoch="6" ver="4.14.8" rel="11.el7_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-7" date="1549886400">- Handle case-sensitive mime types
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-8" date="1556539200">- Disable JAR repack script to avoid multilib regression
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-9" date="1559736000">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-10" date="1559822400">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-11" date="1565265600">- KConfig: malicious .desktop files would execute code
  Resolves: bz#1740736</changelog>
</package>
<package pkgid="b5681de633e16d879c3995c8c6565d00d31e1450f81aa4190cb0cb1dd07aca9e" name="kdelibs-ktexteditor" arch="x86_64">
  <version epoch="6" ver="4.14.8" rel="11.el7_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-7" date="1549886400">- Handle case-sensitive mime types
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-8" date="1556539200">- Disable JAR repack script to avoid multilib regression
  Resolves: bz#1542864</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-9" date="1559736000">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-10" date="1559822400">- Do not fork konsole process when opening terminal from apps using dolphin-part
  Resolves: bz#1710362</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 6:4.14.8-11" date="1565265600">- KConfig: malicious .desktop files would execute code
  Resolves: bz#1740736</changelog>
</package>
<package pkgid="e0c48d9ee005ca4c5c161b0765582fe3aa7c5ab8bcf0ffce5ff6d64397fdc468" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="7f5938f5e4c7444ddd9fd8b420e355564cec9d7555fbdf6b474d2284a4ade3d1" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="d63f64622894aca5b95fec99cac72201bc33458742ab16a9f5f113de644b53df" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="3cd6ee5d87a153be8fadf786cf5c7309e434a62a66b0f81aa55579e6fee9ba83" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="ffd3806523a18fd7ae67a13149d7c1bd1af10b70a98d43dfc27326a45b549200" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="24cebd9ef610c44a7e5d1c3789c9390c1074a31305e107afa96650ac3457e924" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="4a218ab4dc8cc67cb4ab13c59919618d4d152655bd07fd0137b8dd0aeae1053a" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="19dfde1e1ff9f84368995c945827536c83a79cb2a2844d159df903649f58ae3b" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="9957a1c1596decf242ef94ab96e7e1687b83cf21eac3e2e4289c886c6c3904f4" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="ff2d611057fb6ec004462fab9f0612bca884b5352df8fd5a06dc469aa7f60e37" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="d06cf4e71051b17f20e9b117c14e299bc3c4797e4f8865a35d2c3664fd0e4a5b" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="0d641912b5db723fdd744cd49873b63dce3cc9ba322081e0eedca66f99f1313e" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="ce3ccb176f068e6f41c22fded7965732ad2f1c407906efc6421ec0a41660561b" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="219c766aeca5c149964f568f668e6f9341d20f5f80a2f6132b0b17a86f1cbec1" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="a40fa9cfbb08bad6a96f636d03b2e793f50a3d1063cb3ceb2bc42a1911596dbf" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="55aa31283f35a75e653bfc359e1f6c60252ef07350db8b19520aef22fc1a4b75" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="2b5454b79bbc81fb3485bb1df1f2df9200f38db54cc7e4d57e7161215b89974d" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="61c1681e210a6323c297a964966be9fc657114dd448a501cdef808980f696130" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="6309703b823f4a08bcb72fbfc85d49ec0787d6d94dfc4dd5a8535d8b51e92606" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="c72e007abd1820863a8035b9867402834960db4613573c4e50ff2ab7814e3587" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="3f31b581cddec1ce215ea787de414e3f517fd045a8d96348e81c0408b83d8162" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="bcb6b1438e2f78279186af1c7e4d77a90cb8c3e0b45bc3a9a10a4041833f3ead" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="f0df96f954e58268fa34121a1384967863ba2cf42affbb5cf1fa2ebedae8bb31" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="c50f39604e6b984d1d0410c67be6276538ffc097be96a69408f2ad9f27dfc7bd" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="29ca172575e2602a1e9804e3202c7889dbbc276b66ceb5c2f70d729e7f1b159d" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="5dd894c9101c9a20feddf1bf59eb167993a22d11bc6d3b2e00748708446e5c49" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="d4978ed71e962c3a9bf07cda4c31ee592e9d65bfd40b7ff264bf7befb46d5ed8" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="201412cbaa0edae9373db0f0d83469a2a44d677a1d12c91c800ffb369fccbfa6" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="a7b71a396162500ecda4cf161c4b06a17d55667d6bbfec1b6966f8050e707446" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="6a3edf1ef2963d695e409c2fe60e3793422e421d0e772c3e334a38a3c64acf97" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="19a4fe75bad41bff61bd0482a7ec48db38f01caeb3508a715a9dd5421cfe39b0" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="c0f13b399c1e021210b9f8ae35b15994e030c42176d9bf5cd4f8f7bbb4a9312e" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="210e63da1f7764b5c93f6d30db807e4e95b9f9b76b797aeaf82bce3aa88f31de" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="82efb84c2a093fc50cd8442c2db6bdd06199b9daa19fa1c77aa78cfb4e57dd41" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="531d6d2fa20a277f58e77d72d007db5089e452b8e554b877e9eb0532186588bf" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="45a061839d44961f8c6ddf1582ab8ea4e5eb754489fee9b8064c7320995a2668" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="dc3dbe4d37fcef45ab29d080f10b599a149c661ddd4f071bedf23580400d2e58" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="898e408a844705339137e105c3f51d58443d45125e2a63d6711cf54b20a9e457" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="941b6451d363e1d0bb9e5ca21afbee0efa000845f1846692e3c59c6ee60547bb" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="a6502fb75a6650d54e4cce365a9dcd49359197ef7835a5d566ae708c1c332850" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="25360d996846183a1d3cc13495531cc0c99542e75c30b1dba5f2ccc2e25f74a3" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="3c096eb050a3ee886217026ac93893f7d0accb62f11e64ce29d981b143c255cf" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="261dc0772983570d926002f12a054d63efa8bbfa14b5d4b6f5e5387eeaefbf14" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="516cb6b19cdc21fb5113899ca2be7fbb15027523a75f5c2aa1fa2dd49f0c8ded" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="bde31e99fd089291f1ff0a17f5996ccabcdd9be272a1d42643c6d14513b8a6b8" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="0e2e22007667a91c8ef2c946cc339f5f43388cc5813b5c76b3483983ebeb6785" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="1249bb1bb6ad8eeab6cd958ceebb448786da2257192a8b56fd7764a0127fc637" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="bbc8cdb4cdbc41acc301a2f6d994d37cb26275c6c682db737efdf727c754ac2e" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="98ad49e65284eea4a3bb1b4ca1141831b974b1f82b4f785cec75f232d10dcc9f" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="34de2e21d5a96049bc1750dea34d38aa07cf66d5649635b9b06c3f5e441393e8" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="86007c7614dc1f2f2f1eb8414374c5d4e4974da675783744148aa2d73f1e65ba" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="3ba69a38890f222b1e7ce804f8c68b4561733621ac751256f3ce8b45c86d139e" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="9d910f1b916463cd06462acd4a54d7e1df11088807f307839466c9e01d80d386" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="334cbca8e00bd9c5bf7c5c082d9f9480d51be156ca120ccb97d4e37e319821fb" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="dbcc877142ebfb9ae04b7db6e2baeafe6eb039e02d882250367bd31a96deee4a" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="74f3cc5cf36a32934eac7516f6f6054fbc2fd4261457cc0735bd0922d6062518" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="ce3400a90b5e75ded5cb8f06e6e091575791e1824aff8c2ecb90054232f8e42c" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="7fcf7de57a814c8c034c39926a7094003e3dfec074d4659ff2911f082b54ae37" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="1fad3b0e3e647054f1c0a09f5d3466c1458307e408f69dd2f352e2c5d1435359" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="06e92ab2db973dfe424adce8629768fa2143a33fd343596430206b1e5f529d55" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="c818d438625481bf7e2dfed4e9e870e4156a7d2b5c58d3b32b3e8809ff6c9a44" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="05df267e891751975846c6934f240464eea92925713963ca511ba35cfdb4a8ec" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="ef5dd796b5bf4ac37d9fb6dbadcfac1195b276f8ea80064df049df5ee238849d" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="7638079e91a5b86c45f3dbf55436f2bde9645e93f6729732a778fcc948a51480" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="d99f475667bd5fda9d148910be3114af9ea6ffac65fa71f6b92b0e59bf61e332" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="1181a1c81de7748d3ab9831ce604efa3d8faaaa3748f67e359e882dd586aafe5" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="391edc55c00827fb68cec5262ead6388d6b25b0841521e0cafe620fa43bafb1c" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="d95959345818cf7b637f13b22a7838bc4265aa06f0b64c727fa46ed1f83242e2" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="07946cc2cad69ed688f4bd163b9375eab4d7e9013b5f2c8cb705abf819546b18" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="454959f7a23c80c31d39a9c0e58856678c0b06d0ee01456e34c78dc789fc4d6a" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="49c173f817ab513d74fd6a4d7a44134c9496d6de3869f5d73a0ebb40657d0abc" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="c914e97e5ecb7e5453efcf0d7c7abe72db45ab536d01bd60f846e472fc81f836" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="a7a6484d61381a7ea9811af61a795c29a63b93e1338aea41c9257974288a6fa2" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="0a393e1de2b5a67c00055a4adfa68aafd08a2fe79f230a3370995d016b7ac669" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="5c5431f65ab55c400c8847ac444a0909f14461afac8c8872456842c08774e522" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="7fb0d85d670db814d69ce2c99ecbbcc44079a0458877e21af6e7d2aeb8ba09e3" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="0ea96e7262b5aa6c8d408a5d0f3352134321e082437065b23e462076364e9b6e" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="a715e1e346f05dc63846cf169ce0dbb227478078d2b551913517a0923051e0b3" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="986055dfa6661cd217b4d3eb0826e92ebb24ea3673460723d528b86db6c2cc15" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="243cd58717c9010b8cf9c3c1fadc6c3a19d1a78359dda8f1bc38e50fbf39570f" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="c95b38b3d4b3d088ddced45a2a1fa8df170aa01cc7b9b9a7f725b602061630fe" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="e535bde775856e1bc4480d5a917aebcbc771a915fcbb2da24fe235c08aebaca1" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="0122329e8030b8c4c7d1938e64c7fc0cd296350149b5240d02909e524ed5d088" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="aee397d151d808743104c4f9be9442cae1bac02174bb9bf2cc80bbec61cfdacf" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="d805bfb09471f99b87b30b1508f780c536cafcdf24329eae77de059998b97f9b" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="3eb5c2f5df846bdba493c489899de5e854c1ec29465f1adbcc0ec701fddd5bec" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="390eae506fcb39be9a77198514df9473641aeefe0aefe1abe786e03c42c981b7" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="9ee4f265d97da37d79793341ee0af3cbef67ed28501242032c420b8906997c81" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="d9d99a73345718e6154c9b17686229465512d8bd033f761911cba7fa65d09c87" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="b4e2d9f08381f1219ba7b86812481f3b6b603599e1184bb6b9749ae61832d09c" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="ff62fd9b0f639e9bcfc67ff31e86fda837bda1bf1793558e7dd0161e09a5acf7" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="6336104cca9c93676746acac8b4ccba21f0b9ade0433e911efc99c538d366a9f" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="030b8cd8f77e13f71dacc97f9839e6249610aed3997a8a2a6d20349bf6bbc233" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="919a1c126b792ac54865579cc5fbba18d38c8955995e462d05561d30a8be4e0f" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="ef0c4b4f0676e2e08743e8b4ed9088db6a75a65dbe576f6276d586be42c9d80f" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="f1888daf6076cdd79a1611b7eb4ee7a3797773fb468edf7a9ee37cb070f07244" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="e27838ee4f55e027abd08ae652ccf4b5500808b8dcbd9c9b4318049a9807b58c" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="e27f8cef121bf24ab74b679306fe236d5c670e01c844c809114fb25e32734910" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="621b23bb8f42499d4fb1d7a9911d56cf68da14b9666fb8c21f3c60fe8cd5aafa" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="354535fc8c0ce21dc4696d8bec3f108564a6ae6cbc99ea306b6a313a986954e7" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="99cd3264b847b32306e5edaa9426fa04fe2e506f7e9902e602f3aeaac9258fbe" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="0a17fd79fb3a7bbb911226adb4a33fa0cdfaea072b75c184f73a089240cba294" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="91f60f1b79246ca9d4191f194b3dffdfb11a0a4dffbc6b2ad18033ab1aa3ff86" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="c9d17f0f61b481bd1066c87e2c58ccb0b3b4d09840bb45869edda4817463dc79" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="5aa88902339ed6bf893c357606e2f02b8952fe4fa759ebc9c7783b6239e32a8a" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="bc2cb8d70b496f4938399d2fd01ec7459e1f68996b3f4f95175725dc6efc4559" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="d5481d5ed23b4a63cf5431331ce5f606fa85b3a04e4931745c9f17119c34169b" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="4097299e283e1984616a1065680c14921482fc4167602da5b39ca06b6905f7df" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="59cae04abbdb726b0bbd360626bda27d1aec4995dda1174899cba2a4fe0aacac" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="0e0debba21b8270edb722a7ecbb02018018bd82e77bec238ba7bad9375a44fac" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="3f7a6898d73b1963438ff2766f53b54d90ef6ffa9b12f64c1058a2e4e4764ce8" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="5108dbb7090663de08e8e8c99d966fc90ec90e239e06e790181cce94a1172b04" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="0a15f2ef7b0c9bc830272a771f3d5468b027ef129688958e981520381e9ec25a" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="02564bfdf10a9292878360ec67e03facf8d890e1d4173ad682bb9d7cf2d12e6a" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="ded9771f379ef984e7ec00e7ae0e23a5dbc57113f3b5353d43855f1d75074349" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="f1d3579aae714170d58d594c6e2c62b47a00c644c9a0c83594a1b68ffd1afaaf" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="96221529a27240bf34d106a97b7a75d92e008abaaad41da4f89aab58eb7e7f6f" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="a788f64b00e7b355a5769df131b9219bf5da9512c4636f93a777f99b38a4f75a" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="cc15472e1a8d89842cb9bac37a60b976fd17ab17eb37c45aea96016b05e67dd7" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="41957086dbe31b25315b48d4a76342ac147d67660a490f827888305767e75c1c" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="aea202dc51b6db3417b0a8714066483d219298d66bf57740490412abdeb59e5c" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="bfbeb2d916b532179e397f6db42fd96a2355c028894c45903418f11a89755ce7" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="0f4b703fbe4372eaa7d85f83023f2a9dac65de51b018bd1170056bb2929933de" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="7583b1c38194e8e18dc03248b16fe15b34763a084a8b0266fa8f9d1ceec3c03d" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="3abb91e894fae8ac76fbff0df05552cdaca3bc723f287224614ab71d20e96959" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="0f630687f9c6c07bfe134829523f080fb7e67bf789ffa35a087b70dbc89c4167" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="590ad1a1ef58c8fd5c5d0e8da17381b044c839f24c25a42e9177146848b1771f" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="9e599d71e88ce91aa1af139fdfd738b6cf3866ac59e2b9176d90b2d33182b5d8" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="a1ae5c65931edbacd969437360c0344d31cef604bc894f04e9407d659c9d3315" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="9d397f547947b64dd451359e3c0909cc2d113005d781b16b722df398e7f05776" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="3c8ff848345b59f7b2ebdabe9436ec36e436d256b68f21eef1eb4faee7261558" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="e8ca9b0cf9429755797b6e5be2b0624462ae78a3e6e46ea3a0a2e2332fe0460e" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="eaccbb7165eb322856300f8614b6e8e454dfd7b2a0ba5e8525e1045faff6896f" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="344d16a8dc05b48e003e080b40272963d3bc2df0bf04db8baab5aad65207452f" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="616929fe4c148905c0f466817f985168b220007c0ac1f890063f6fd1ed6cd979" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="8bbd8fe438dbce56ba155d3440f8b944afa605d6e6b3f8bf70ab5309b98649f2" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="4dc0ecb0c3514b6c35f23da25f8778c1bb5383df70ad3955b5b76c25d4161b88" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="7b079de3ed0c3b1c3e4677ffaa645eb99e5d2eb215def9e465af00e0c12fe6f8" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="9c8bf11ab553342923c859fd997dc884a8ed539005d8b38df2d1c54561dfca87" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="7e31750ee71120ce1b908c7c4a1cd16d8ce20e8179c5fb027bf8f77d46da4c42" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="952fbdd2989aa7dcbba8139c8a937376e08e86a197b2815cafa995274c2d4cfe" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="5abb083ce9b68007da1edab122d04196feba672f2b082afee31e08c2ef9c7bc2" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="980726350345a8390a9a712580ed24f44cfc31eb5e88078bbdc60e96de8de77a" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="4c4ae72c2387a237806e3392439f0755d98f628c928e80a29f376f930c76dc8a" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="679d01ba54ccf9e4dec5d7eb651140355396c11e3fa0b297b61793b56d2b6fb9" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="bd9c2d59c51f1bc076ca8b5e96f89d8e9b89258a2ebcb3652312fa3e3e77cea7" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="0925d96c9193be9393be31dd2a3472c7da03d8bedd6e1e7677b5b1dd9eda8bee" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="ac21dbb230b84014ee1d718450196fb28d329aa9b3a915dcc3a252a8d8e56ff9" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="523eee98ffca33e5e3b681cef8e079e7525b7b79ef0313634fa5d73f83e3917d" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="b5312245cc0d949b42abd400946ec983e07079d42aaf6d801d43d7e583b85506" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="a71ee47342158d2df8370a6e5761c1eb8b2df1f8ea9a9f4e427adc86a7780bc3" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="2146cdc7721fe400494e5534991d8e5708a8c10579ddebe35db83c7604bd6993" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="9dca18d975cd351f192fcc6eeca857392356057c6215b0e6bdc002429fe4404d" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="b02052d25c1823aa05f04a4c8f28ec5046fd518f4bcbaeb46531205e4d1a5c36" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="c41af8d43f53fb56919be0d041a7cce5335b9392240e5b7e731cec6669270add" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="b2e22811c47bb0c5b5f3ef81f2557f37dbc6f02f59ae75e6cf5758ec794f640c" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="282a3a477a400926283a594a2c8814f02d321f94498ea820dd628a5fd9192da4" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="24a6d0aaf29772534b3bac9134d9ba04cb2550981eb3b621b16a2c14899c7a59" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="950e8836ace8603077b410b7d793a88bb186804313a722c19fdf77c284b8331c" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="bf77dad75addb1355609b1697f514a348dba5c4d933029b254739419285e21c3" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="bfbaa3bc148ec6fcf3fcb5fe878ec273dbede40e77e7867e8328f23e8e700804" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="cb5e33dcb63ffb0af8c637b6f5c2db0331cfd366646f3100d181da37a3b5291c" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="2c98751807588c422d2b8a8fa634e7ce50553f8be4d86eeb02e26f5d50ccd8e2" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="d5f997d65e4b92f6b12d1a60d1fb6e7e7721589dc35c304b772c89177eb5bd27" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="b4b330493e5b98176bff45faf10ee5a48a46759bd09b13a12975ab073b30b9ea" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="8199fb38d606ca73f385f6f5dd29a2e42d0a848e917f9b02b2ced347e9865e12" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="3e856b0a52f1d2adf63428d87b9708c68bf7cbe683601ae7f4e41fdfe68537e8" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="2eaa137375f6ee8b45c58318ec0e71b5ed225397ef9a2f9e7bfdb858f2ceae91" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="02b8c7369f216d23a89cd843e8498b08ba461f9f5b102051a5eb01afb0b8606a" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="69a61f633e66babb7b30b308393b1ab3698335152ba71cd0663045bffec794bf" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="952511c869ef91aa870341d6a35be49cac6817d87d4c85dffe236c70c1bac5d3" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="70b240012de252384c1a0f91561939930f8db80bb798bcd1c191b29ea02f927f" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="bf0c746422abf37ca9b8e6d416da8cdaca6c54efdb72c269462d715ad5e39435" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="0709ed90a1dc3fc7f23a66b21469cd0d1012bc5fc577814134f9172179a6d087" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="bb531fba5bb6ea6ec022356e0c5edb5e29138b594c9a79e1bf3fe9d94bb543ad" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="6cccd9ec57765f4308f1ba3f67779748f3ab7347b6f837da38be6cbd596bfa84" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="b3e8fe98bf88c373d5bc8959571e7c5fe74ce091c1f030aabc2417a7f329e2b0" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="e41bd239213f976c77194ee9fc92e21854c23ac5a8e7dcc6b02f08435a1fae11" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="1f10660d76d827ba377056a5948d5afc8eed42317cd69b2208ce733017b32a6a" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="d691fd49b8e1a73d56e961059816f7912d87fda4088e95e9f292fca42e478916" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="9c10c4aae5e7498577442838b4f0b32ff86ef2f74220c902e609cd490285d89b" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="d82f5f1719969daeadad17d4781094404e76a4179524f4fcadc49c6735dcc068" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="bd355dee6ca0266048bc779008ea2032ff564c924a503c0c9b0c08db95c8d34c" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="9de4c6b88e3ba2d532e6d15586861a6f6b2156e7191db446c2648b38079672a0" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="9a61bee86572d7b1e28abb484f6eff00bb1f7f39f7e1c24bd6cf17b9309d61ac" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="521f3b9ebe42415b87a57a4d5d1d8062e59466ddeb79e7d08e1e44e6124aedd8" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="7cf0443f2785c960ddb8c599b4f0b9d1b8bcb27b08f19bad938b9efd98fa4d86" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="69906887657f9f31f5566c0898d0d22a6984fbc84ac1154c7404dd3763a11826" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="7e23d8af2ccbd59a3ec4705aad8e20a2bb4efe1be3f5e8457486950660f34179" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="5af5d911fd578a5c0aec039ad5f31ef8964571aa61e4892b0cc8ab55bc06470f" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="fc9865bee303fb119d56077a4357d00a55c5b965bc7cc981f44c53cb352d9721" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="f9de583a5f98c88acef379c2009d18d9ca142ba9d5cb64dfb7eb24844c1338f6" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="0a2855c57e29cd97f30acdb775ded5a675d7aa8809fda62642a58863ed8e507d" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="50f313f20029687622c52e068997cf628fa26adffeafff173f51d660b7123422" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="cb1ee5d0d5d0ecae9a0bfa43de77be13eaef5f8dcb8436ad426a76dd3941f671" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="bb27ec517c8e18edf71cf6462f1956637883a98d7e039cb136de026616da0930" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="7ab373c029517cba7fa22f0aaedd4dbb350a71729919d1ae781df2ed59c85490" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="690ba6b2d117d2427bf2590a3a3739b8207d5354256929a2f3fed43828b9fc58" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="eea9c8a0272e090d554454c954bab4cd801a5790ef2e4bc4c40b07a448884a8a" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="3beaee778166f9f68858463ff8b16ad7b46c9a02659b4a5384c9a91c1a532b05" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="5ae9fb9b9cf9e23205fd09297efefd60441147656950b93fbe20c8fbcdc6d395" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="8212ebf750548047783a37817291ccedb11596c2f0d3f35fb052d35f297c4c31" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="9050851847514e5078eff45cac2fac97cbe613a2bde59a9a1671de8dc8b6d735" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="4e50ce7b4fa7e8eee4dbc78d21d73069c012390ac5d9bf7724b62852ba1e438a" name="kmod-redhat-qla2xxx" arch="src">
  <version epoch="0" ver="10.01.00.20.07.8_k_dup7.7" rel="2.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 10.01.00.20.07.8_k_dup7.7-1" date="1578312000">- c45db7d2f34d6fad924c20443f73147dca7f6e29
- qla2xxx kernel module for Driver Update Program
- Resolves: #bz1784769</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 10.01.00.20.07.8_k_dup7.7-2" date="1578398400">- Rebuild due to issues with brew environment</changelog>
</package>
<package pkgid="02d42367e43e4b002435cdf9f25df028c29a3ad515f68b5f112212917de524f3" name="kmod-redhat-qla2xxx" arch="x86_64">
  <version epoch="0" ver="10.01.00.20.07.8_k_dup7.7" rel="2.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 10.01.00.20.07.8_k_dup7.7-1" date="1578312000">- c45db7d2f34d6fad924c20443f73147dca7f6e29
- qla2xxx kernel module for Driver Update Program
- Resolves: #bz1784769</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 10.01.00.20.07.8_k_dup7.7-2" date="1578398400">- Rebuild due to issues with brew environment</changelog>
</package>
<package pkgid="1d52d1947cceba2294bc461e01f9640dc4a9163a86a08f5250d6b6862caf2951" name="kmod-redhat-qla2xxx-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.01.00.20.07.8_k_dup7.7" rel="2.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 10.01.00.20.07.8_k_dup7.7-1" date="1578312000">- c45db7d2f34d6fad924c20443f73147dca7f6e29
- qla2xxx kernel module for Driver Update Program
- Resolves: #bz1784769</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 10.01.00.20.07.8_k_dup7.7-2" date="1578398400">- Rebuild due to issues with brew environment</changelog>
</package>
<package pkgid="cbf8bebff8dc3f3f214df33581db5c820a3e6c9d60bef4e2a0c37d1a8c8cbc4e" name="kmod-redhat-qla2xxx-devel" arch="x86_64">
  <version epoch="0" ver="10.01.00.20.07.8_k_dup7.7" rel="2.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 10.01.00.20.07.8_k_dup7.7-1" date="1578312000">- c45db7d2f34d6fad924c20443f73147dca7f6e29
- qla2xxx kernel module for Driver Update Program
- Resolves: #bz1784769</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 10.01.00.20.07.8_k_dup7.7-2" date="1578398400">- Rebuild due to issues with brew environment</changelog>
</package>
<package pkgid="cab9cf6c33effd130db057abf7cb6878317b83c096d8cb5a24659b07a7c2d5e5" name="kpatch" arch="noarch">
  <version epoch="0" ver="0.6.1" rel="5.el7_7"/>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.1-1" date="1447848000">- update to 0.3.1 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.2-1" date="1465992000">- update to 0.3.2 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-1" date="1489406400">- update to 0.4.0 (rhbz#1427642)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-2" date="1508328000">- fix backwards compatibility with RHEL 7.3 patches (rhbz#1497735)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.4.0-3" date="1510833600">- kpatch: better livepatch module support (rhbz#1504066)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-1" date="1529582400">- update to 0.6.1 (rhbz#1562976)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-2" date="1560340800">- kpatch: patches shouldn't be unloaded on system shutdown (rhbz#1719309)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-3" date="1561291200">- kpatch script: don't fail if module already loaded+enabled (rhbz#1719309)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-3" date="1561291201">- Rebuild with correct RHEL-7.7 bugzilla number (rhbz#1719309)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-5" date="1567771200">- kpatch: clarify that "kpatch unload" isn't supported (rhbz#1749299)</changelog>
</package>
<package pkgid="75f19ae8a03138151cdeaa6e59a1c5168e4668509f061f2f4b519690751b3295" name="kpatch" arch="noarch">
  <version epoch="0" ver="0.6.1" rel="5.el7_7"/>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.1-1" date="1447848000">- update to 0.3.1 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.2-1" date="1465992000">- update to 0.3.2 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-1" date="1489406400">- update to 0.4.0 (rhbz#1427642)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-2" date="1508328000">- fix backwards compatibility with RHEL 7.3 patches (rhbz#1497735)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.4.0-3" date="1510833600">- kpatch: better livepatch module support (rhbz#1504066)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-1" date="1529582400">- update to 0.6.1 (rhbz#1562976)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-2" date="1560340800">- kpatch: patches shouldn't be unloaded on system shutdown (rhbz#1719309)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-3" date="1561291200">- kpatch script: don't fail if module already loaded+enabled (rhbz#1719309)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-3" date="1561291201">- Rebuild with correct RHEL-7.7 bugzilla number (rhbz#1719309)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-5" date="1567771200">- kpatch: clarify that "kpatch unload" isn't supported (rhbz#1749299)</changelog>
</package>
<package pkgid="2248ab8b160b5cff5b95021f5df78b620beebac1b7738915fc61e386604c0b8c" name="kpatch" arch="src">
  <version epoch="0" ver="0.6.1" rel="5.el7_7"/>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.1-1" date="1447848000">- update to 0.3.1 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.2-1" date="1465992000">- update to 0.3.2 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-1" date="1489406400">- update to 0.4.0 (rhbz#1427642)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-2" date="1508328000">- fix backwards compatibility with RHEL 7.3 patches (rhbz#1497735)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.4.0-3" date="1510833600">- kpatch: better livepatch module support (rhbz#1504066)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-1" date="1529582400">- update to 0.6.1 (rhbz#1562976)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-2" date="1560340800">- kpatch: patches shouldn't be unloaded on system shutdown (rhbz#1719309)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-3" date="1561291200">- kpatch script: don't fail if module already loaded+enabled (rhbz#1719309)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-3" date="1561291201">- Rebuild with correct RHEL-7.7 bugzilla number (rhbz#1719309)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-5" date="1567771200">- kpatch: clarify that "kpatch unload" isn't supported (rhbz#1749299)</changelog>
</package>
<package pkgid="4de2f8e67948120807bf477f870e3ecc4b6ec1364907b4839e963138902dfa36" name="kpatch" arch="src">
  <version epoch="0" ver="0.6.1" rel="5.el7_7"/>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.1-1" date="1447848000">- update to 0.3.1 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.2-1" date="1465992000">- update to 0.3.2 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-1" date="1489406400">- update to 0.4.0 (rhbz#1427642)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-2" date="1508328000">- fix backwards compatibility with RHEL 7.3 patches (rhbz#1497735)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.4.0-3" date="1510833600">- kpatch: better livepatch module support (rhbz#1504066)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-1" date="1529582400">- update to 0.6.1 (rhbz#1562976)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-2" date="1560340800">- kpatch: patches shouldn't be unloaded on system shutdown (rhbz#1719309)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-3" date="1561291200">- kpatch script: don't fail if module already loaded+enabled (rhbz#1719309)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-3" date="1561291201">- Rebuild with correct RHEL-7.7 bugzilla number (rhbz#1719309)</changelog>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.6.1-5" date="1567771200">- kpatch: clarify that "kpatch unload" isn't supported (rhbz#1749299)</changelog>
</package>
<package pkgid="87d77df7c639f2bd821560a2e8d61e30ac232fad173a465c483dc3aee64a910e" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="436679fb4e24789219b927c39c12bacec1b6616b6fbc1cd31b2c2818f424d859" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="4c85b5203b78e0d921300a3ff1201a30404058cb381ca77fc4e740f10e62e46c" name="krb5-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="68be10040d99c236dcbbdd05b2d94055f2a1e804a6103a4a0c231a2b18ddbb2a" name="krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="129205226902026afea6e575977588d17841da92388baea0ec4e38509012720a" name="krb5-devel" arch="i686">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="5e194495620d1eb7579b4cb3abfa82cbee1a5a28efce344f8f8a33d55c990aa3" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="f59ad3f6efacce91502f41a0e45fd54b35c6cbae0401a71ab8149b8f4ca73857" name="krb5-libs" arch="i686">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="3652b77796560ef5b81aa687846aebe9f8fd49c225afb834c66ad2c1dd8bb0a1" name="krb5-libs" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="23d4834f034794e6ddc92648439683b6570994a771a473a26932308789722d34" name="krb5-pkinit" arch="i686">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="3a8e2e17d81adb8c5e04867a184977ea7db70eb51df46e760a26fa756cf84d0b" name="krb5-pkinit" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="59c45edcde46e2f2ba5e6d179dc6547c6c9d72fa508f471e6d359ba1e6eef296" name="krb5-server" arch="i686">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="cb1048c67add7a496e4af6abfa14cc8314d2377d1e99f14be56156ea9b3f2df8" name="krb5-server" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="31f07d73205c8880ae57c3747d8ccfa18df6afc2a2a0ec095488532f1f4638fe" name="krb5-server-ldap" arch="i686">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="44905e1c922b4d2caeab7b88ac9f079faf1e0fe520164ba86fa079eb767fe3ea" name="krb5-server-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="fd133d48856c1e85254a6551b2f43d3f83d50352378c280b1f4549c3eee13721" name="krb5-workstation" arch="i686">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="db0c55445129bfd3fe573f7e1ff930bc0562f8a8e1a1f1485bdb22652cc11086" name="krb5-workstation" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="69e4ee5ebc0776840e2cacb2cd075b448178e5e81121317ccd516422280a7397" name="lemon" arch="i686">
  <version epoch="0" ver="3.7.17" rel="8.el7_7.1"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-1" date="1369224000">- Update to 3.7.17 (http://www.sqlite.org/releaselog/3_7_17.html)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-2" date="1386244800">- Backported CAST fix from latest upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.7.17-4.1" date="1404993600">- Backport 64k page fix from latest upstream (#1118151)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-5" date="1408449600">- Release bump</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.7.17-6" date="1413892800">- Release bump for ppc64le</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.7.17-7" date="1431086400">- Release bump</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; 3.7.17-8" date="1437652800">- Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416
  Resolves: rhbz#1244732</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; 3.7.17-8.1" date="1577966400">- Fixes for CVE-2019-13734 (#1786505)</changelog>
</package>
<package pkgid="726330ecab1d587af9bf875a24916631eb869f191c5b21cfa59e24d830384d07" name="lemon" arch="x86_64">
  <version epoch="0" ver="3.7.17" rel="8.el7_7.1"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-1" date="1369224000">- Update to 3.7.17 (http://www.sqlite.org/releaselog/3_7_17.html)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-2" date="1386244800">- Backported CAST fix from latest upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.7.17-4.1" date="1404993600">- Backport 64k page fix from latest upstream (#1118151)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-5" date="1408449600">- Release bump</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.7.17-6" date="1413892800">- Release bump for ppc64le</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.7.17-7" date="1431086400">- Release bump</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; 3.7.17-8" date="1437652800">- Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416
  Resolves: rhbz#1244732</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; 3.7.17-8.1" date="1577966400">- Fixes for CVE-2019-13734 (#1786505)</changelog>
</package>
<package pkgid="30409db598a0928447b45f041ed5d53a781cf100ba1ac9f3c2792f3e57afca8c" name="libarchive" arch="i686">
  <version epoch="0" ver="3.1.2" rel="14.el7_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-5" date="1374494400">- try to workaround racy testsuite fail</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-8" date="1467979200">- a bunch of security fixes (rhbz#1353065)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-9" date="1470916800">- Fixes CVE-2016-5418: Archive Entry with type 1 (hardlink) causes file overwrite (#1365777)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-10" date="1471003200">- Fixes variation of CVE-2016-5418: Hard links could include ".." in their path.</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-11" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.1.2-12" date="1556625600">- fixed use after free in RAR decoder (#1700749)
- fixed double free in RAR decoder (#1700748)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-13" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-14" date="1579262400">- Fix patch application error</changelog>
</package>
<package pkgid="85eb52ac8bd057774c626905693406cd7da610ada3d5eb321eb18732b6fbd71c" name="libarchive" arch="src">
  <version epoch="0" ver="3.1.2" rel="14.el7_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-5" date="1374494400">- try to workaround racy testsuite fail</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-8" date="1467979200">- a bunch of security fixes (rhbz#1353065)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-9" date="1470916800">- Fixes CVE-2016-5418: Archive Entry with type 1 (hardlink) causes file overwrite (#1365777)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-10" date="1471003200">- Fixes variation of CVE-2016-5418: Hard links could include ".." in their path.</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-11" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.1.2-12" date="1556625600">- fixed use after free in RAR decoder (#1700749)
- fixed double free in RAR decoder (#1700748)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-13" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-14" date="1579262400">- Fix patch application error</changelog>
</package>
<package pkgid="ff763b40be50ab622d810a6073166238164bf357574c19ccf486d6d2c3bb4b44" name="libarchive" arch="src">
  <version epoch="0" ver="3.1.2" rel="14.el7_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-5" date="1374494400">- try to workaround racy testsuite fail</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-8" date="1467979200">- a bunch of security fixes (rhbz#1353065)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-9" date="1470916800">- Fixes CVE-2016-5418: Archive Entry with type 1 (hardlink) causes file overwrite (#1365777)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-10" date="1471003200">- Fixes variation of CVE-2016-5418: Hard links could include ".." in their path.</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-11" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.1.2-12" date="1556625600">- fixed use after free in RAR decoder (#1700749)
- fixed double free in RAR decoder (#1700748)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-13" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-14" date="1579262400">- Fix patch application error</changelog>
</package>
<package pkgid="0ed06a916daa5d5898d34817f7baf0ec42c2636a93d9744541b35e0d1a913cdb" name="libarchive" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="14.el7_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-5" date="1374494400">- try to workaround racy testsuite fail</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-8" date="1467979200">- a bunch of security fixes (rhbz#1353065)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-9" date="1470916800">- Fixes CVE-2016-5418: Archive Entry with type 1 (hardlink) causes file overwrite (#1365777)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-10" date="1471003200">- Fixes variation of CVE-2016-5418: Hard links could include ".." in their path.</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-11" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.1.2-12" date="1556625600">- fixed use after free in RAR decoder (#1700749)
- fixed double free in RAR decoder (#1700748)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-13" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-14" date="1579262400">- Fix patch application error</changelog>
</package>
<package pkgid="2b5f0f8c8c48daf647d3f5cc4d0b8f7a48222df8adb861a89d442aa0808e1da2" name="libarchive-debuginfo" arch="i686">
  <version epoch="0" ver="3.1.2" rel="14.el7_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-5" date="1374494400">- try to workaround racy testsuite fail</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-8" date="1467979200">- a bunch of security fixes (rhbz#1353065)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-9" date="1470916800">- Fixes CVE-2016-5418: Archive Entry with type 1 (hardlink) causes file overwrite (#1365777)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-10" date="1471003200">- Fixes variation of CVE-2016-5418: Hard links could include ".." in their path.</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-11" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.1.2-12" date="1556625600">- fixed use after free in RAR decoder (#1700749)
- fixed double free in RAR decoder (#1700748)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-13" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-14" date="1579262400">- Fix patch application error</changelog>
</package>
<package pkgid="8bc027d12c19008e2e8077db2d2ee7a461b243bde2d0a0ba9d6354cdbca64435" name="libarchive-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="14.el7_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-5" date="1374494400">- try to workaround racy testsuite fail</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-8" date="1467979200">- a bunch of security fixes (rhbz#1353065)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-9" date="1470916800">- Fixes CVE-2016-5418: Archive Entry with type 1 (hardlink) causes file overwrite (#1365777)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-10" date="1471003200">- Fixes variation of CVE-2016-5418: Hard links could include ".." in their path.</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-11" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.1.2-12" date="1556625600">- fixed use after free in RAR decoder (#1700749)
- fixed double free in RAR decoder (#1700748)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-13" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-14" date="1579262400">- Fix patch application error</changelog>
</package>
<package pkgid="c139cd8138367f5984b9d5f0462a90119f8f695b6d0b99d888624fba5b2a9d25" name="libarchive-devel" arch="i686">
  <version epoch="0" ver="3.1.2" rel="14.el7_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-5" date="1374494400">- try to workaround racy testsuite fail</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-8" date="1467979200">- a bunch of security fixes (rhbz#1353065)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-9" date="1470916800">- Fixes CVE-2016-5418: Archive Entry with type 1 (hardlink) causes file overwrite (#1365777)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-10" date="1471003200">- Fixes variation of CVE-2016-5418: Hard links could include ".." in their path.</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-11" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.1.2-12" date="1556625600">- fixed use after free in RAR decoder (#1700749)
- fixed double free in RAR decoder (#1700748)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-13" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-14" date="1579262400">- Fix patch application error</changelog>
</package>
<package pkgid="9b8b65e867b7de306a5ef4111c5ec6272e9932eb98d64414cb5393afa7f473af" name="libarchive-devel" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="14.el7_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-5" date="1374494400">- try to workaround racy testsuite fail</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-8" date="1467979200">- a bunch of security fixes (rhbz#1353065)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-9" date="1470916800">- Fixes CVE-2016-5418: Archive Entry with type 1 (hardlink) causes file overwrite (#1365777)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.1.2-10" date="1471003200">- Fixes variation of CVE-2016-5418: Hard links could include ".." in their path.</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.1.2-11" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.1.2-12" date="1556625600">- fixed use after free in RAR decoder (#1700749)
- fixed double free in RAR decoder (#1700748)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-13" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.1.2-14" date="1579262400">- Fix patch application error</changelog>
</package>
<package pkgid="3c0664e780b386173bb92367e888bf4b161bda1e9abfd40b61a880551b975b03" name="libblkid" arch="i686">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="cebd7014c6f9504a6bc3f75cf16cf5ec029827d1c46d3f0cb49414171a370ad0" name="libblkid" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="a991ef6b5fd06871965e49e295f71ac1a779336110d3501e252013ef1f4311fa" name="libblkid-devel" arch="i686">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="af34e9f5931f7af4038f34543dab7255331701c5dff15ddacb9d5db9c4a9974a" name="libblkid-devel" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="39511211aa60d1b226501e59be7c7723e6ac214a3a4adced19e99f3b5f49f63f" name="libcurl" arch="i686">
  <version epoch="0" ver="7.29.0" rel="54.el7_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-46" date="1512993600">- reset authentication state when HTTP transfer is done (#1511523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-47" date="1519992000">- make NSS deallocate PKCS #11 objects early enough (#1510247)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-48" date="1527681600">- fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-49" date="1528286400">- make curl --speed-limit work with TFTP (#1584750)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-50" date="1528372800">- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54.el7_7.1" date="1570449600">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
</package>
<package pkgid="8fcb54aaa1a5870a1627d2e84823eb81cd467bf74b8f69ecc3331913c2a9b271" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="54.el7_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-46" date="1512993600">- reset authentication state when HTTP transfer is done (#1511523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-47" date="1519992000">- make NSS deallocate PKCS #11 objects early enough (#1510247)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-48" date="1527681600">- fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-49" date="1528286400">- make curl --speed-limit work with TFTP (#1584750)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-50" date="1528372800">- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54.el7_7.1" date="1570449600">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
</package>
<package pkgid="5f5f6b9f8345932ec59f5a3a789ed223fc99bcf3c6e4187e056b1c8952a6b8ea" name="libcurl-devel" arch="i686">
  <version epoch="0" ver="7.29.0" rel="54.el7_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-46" date="1512993600">- reset authentication state when HTTP transfer is done (#1511523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-47" date="1519992000">- make NSS deallocate PKCS #11 objects early enough (#1510247)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-48" date="1527681600">- fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-49" date="1528286400">- make curl --speed-limit work with TFTP (#1584750)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-50" date="1528372800">- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54.el7_7.1" date="1570449600">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
</package>
<package pkgid="df53f3dc5fbf54cf9c2e800f0e2f85fb625449e160a1aeaeaa13260c75ca515d" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="54.el7_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-46" date="1512993600">- reset authentication state when HTTP transfer is done (#1511523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-47" date="1519992000">- make NSS deallocate PKCS #11 objects early enough (#1510247)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-48" date="1527681600">- fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-49" date="1528286400">- make curl --speed-limit work with TFTP (#1584750)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-50" date="1528372800">- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54.el7_7.1" date="1570449600">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
</package>
<package pkgid="7ccdab1b6ce596033e98ffb6cb2001c8f5fa4d6f8e771753c88a7b8549ab804d" name="libgs" arch="i686">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="b388835919aee257c17938b6535dff40df6575119db403e0fc86129c189c6289" name="libgs" arch="x86_64">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="2fcf7e83e37bdb8bf38f6c263921c261b34bee965b9f1a463547d0fd6c23944a" name="libgs" arch="i686">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="c8b77272307b0009d58fa72d0adac4a50509c693a0425ac4f4caa3629ce2c6dc" name="libgs" arch="x86_64">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="3af27f67ae9f7e4ea6df54d4ee0173579a6b671f8d8395aa6fac00c9ee883546" name="libgs-devel" arch="i686">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="dfc02d185f13cce659822d40134b9d96ed69fcf9576f5e05705b0abd750ee88c" name="libgs-devel" arch="x86_64">
  <version epoch="0" ver="9.25" rel="2.el7_7.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
</package>
<package pkgid="98b1ecbb1493a9ca40d2e3e52c24bfb2d9cf691d469f648b8ce1b7c744a554e2" name="libgs-devel" arch="i686">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="2fa395b5ad8482b3a126abcd7d223c1292de98c951281cc2c45233667a983165" name="libgs-devel" arch="x86_64">
  <version epoch="0" ver="9.25" rel="2.el7_7.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-32" date="1547640000">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)
- Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509
- Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
- Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c
- Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)
- Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)
- Resolves: #1661210 pdf2ps reports an error when reading from stdin
- Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)
- Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-1" date="1550145600">- Rebase to latest upstream version (bug #1636115)
- Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)
- Resolves: #1670443 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- fix for pdf2dsc regression added to allow fix for CVE-2019-3839</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2" date="1554206400">- obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.1" date="1565006400">- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.25-2.2" date="1566475200">- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.25-2.3" date="1573214400">- 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys</changelog>
</package>
<package pkgid="939182c5f7ae5ca828cc4d4d562368f9a26a2aa7ddba4e22c2e111b64d8f7797" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="aed6d89bb0030a8d08950436c7fecda6bc43ddd3e6635d3437a7489c805cdfbd" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="9ca664dfff8e6d4e3cc80efd6edea9a10616ba9bd72a0649b43ccf17c48251d2" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="b3685eca1f299a90e68a340485dd302088ad01f9c45e21e7a0981e1a1360e1ee" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="d50c165df2c2b6007df8ab53f419ff92830aea4da28f1fc3a701855e8fd90171" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="bfd59d25d2bc05c9ca0a6c9f1ba2cdd269d5dbb00c63abc5e6f59993f2204219" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="4e10af526240a39e29f202447a051814916c87f9f41d366948e35783bb97158f" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="2a60d2a33ac0862d969e2368c8c125b58faa0323b09aeb2f1666eed225417858" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="6e77d2a2667dfbf396e4f4043d4fee70c403edef78bf7e22e3dc94bfbabbcb11" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="372c34e2d18c7b98f683e4c59ea33b09a5dac0e7e5443589778fd2093f2079ae" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="cf38f4fe5cb080710c4abba73ace06e0201a7af369d2037147e4ccaca8732ecd" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="445de5dee37011fb1d7ac46c0b96a9b34a2a6ed6515386b95906623a8dd51f69" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="17c82a9fe67c3b3487a39f82ffb41f52ae9011eded0f4c41244a2952c455269b" name="libguestfs" arch="src">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="e5608ab2cadc08ab5e79b0051c9f9a513f05392ef394e00cedd71715042da9a6" name="libguestfs" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="c7bd98374ce651e8a46c31cfac697efe6817a94889bbcec46beb2cf76687aa69" name="libguestfs" arch="src">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="e1b2d89277b00b75520dc295ea337f426be52feffbb1e4a0118890adc707557b" name="libguestfs" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="18440c2c863e02d2655826fcabd9d623db809c3da48a197a6a7299751c214a13" name="libguestfs-bash-completion" arch="noarch">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="33791cc443a2c16ae79451f4eac8b3ada3c47ea9adf8a2e72586dca9ae31c025" name="libguestfs-bash-completion" arch="noarch">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="1e9700f0cb7b29289e841501e4c208ad76785cb43a553cf49bca157be0ec65cf" name="libguestfs-benchmarking" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="781d3f44c0e797209c4d34fac5b64394bafed0982efd7b6b3331f23d71807575" name="libguestfs-benchmarking" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="2aced3492dfbb03d9f5ad27ee5b4d30280b2dcbc4952ebc6e5cbffdd55aae5aa" name="libguestfs-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="4996eb758ca53fee829b1991f87aba39cc0ca176525d21488d68683c81e3d070" name="libguestfs-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="9e6186f56ba7dea90af95bb0abce63fc491ccafe31543610dfc2c6e0431c5eac" name="libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="b4a2ec0beb9dea096652fc4152013bdb484729fe6b6dd6d28313cdbece30dc01" name="libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="03c5f5b9bd0d91ceddf47fc5a3a5650bdc4de7191546f5a6c2176779f5acdf8c" name="libguestfs-gfs2" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="b94ac9a0624fd00c522c86df875f7e71a1782f8229dc047809c97ccb11b19a45" name="libguestfs-gfs2" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="1499fba8f215043dd647a8876a481bf522d9e210889a44fd2c574e51aaaff8d9" name="libguestfs-gobject" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="12db7bbe5c3340abd15a01f7899e3d63a815e5ab82d68d8984bc265dce49298d" name="libguestfs-gobject" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="cc8fac3f532b38a345c1114b475ecf41d7d4ff3902c46d6de3486d81708923bd" name="libguestfs-gobject-devel" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="253dbaa2ab36d0f85a57d56b8b6abba9b31f05886e80944b1c2f6f12a67876bc" name="libguestfs-gobject-devel" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="fcfc7b076ff294b54e7d409c2790f95e85d0b5bce67490e34761fe71e3b38cf8" name="libguestfs-inspect-icons" arch="noarch">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="ca13ab542d1eeb610ae385f50f9194a7df99a6013b7adb8f1aa27b0e9aadb444" name="libguestfs-inspect-icons" arch="noarch">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="c3835057a7835778dc25d58f63233d004ba9e43d7cf58e8cd449ab27e750fda1" name="libguestfs-java" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="2cb59c52b7a6122b608ee6496d176c21c20634a057b7e2b286fb3de984dcaead" name="libguestfs-java" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="7eb22b0ecd79ea6228f657aabe9b3079a9e1164312194fd19df0e3907215ff35" name="libguestfs-java-devel" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="e0adc9d660fd2694a62a98a192bbbdab5c17e7b776e59c1cc758ada16b22568b" name="libguestfs-java-devel" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="d6102660d71f5a36838556c5557d2d6a7f9e80a526b12709d0a3c73fd92ef950" name="libguestfs-javadoc" arch="noarch">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="d74924fa2daf2f72d4cf420c4dbe40627add864641dce79f537e882ac47a5d21" name="libguestfs-javadoc" arch="noarch">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="f9ae4375d820f875114cdfa9ec962135759d1f92b1fe70a583bf04f4493bda7e" name="libguestfs-man-pages-ja" arch="noarch">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="b36e0e4ee7f044ea7d6924ffea22fcdeef741bf1cfa62ef45b1b623d16d6c4c8" name="libguestfs-man-pages-ja" arch="noarch">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="4881e0698baa5475572f246a900159edc97a94e15be03421fa79c71e2d2d61e1" name="libguestfs-man-pages-uk" arch="noarch">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="e66ad2fc192168884c1e60e7334248de3d28cefa9f13059224fe590b3ac2a972" name="libguestfs-man-pages-uk" arch="noarch">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="f14fd5f3237977a10c25c371e4bcfcfa6c7ce0ab1a25337e2d758887eb6f83c9" name="libguestfs-rescue" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="7b91de81598fb9343863e1ad61196eaa72697bb6fddd0076d766b6473e997623" name="libguestfs-rescue" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="a2a2937d879880d67eb441a192bac197d352ab37309cdba4815f58be16afdc5d" name="libguestfs-rsync" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="738dd24d8a0915748f6acc55da69fe179302b4cbc7f33a11c981a15a28040296" name="libguestfs-rsync" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="19812ab321f72797e67fbb0da5e8d4c3121fac716b0d0a43b5918e23f6e6d8cc" name="libguestfs-tools" arch="noarch">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="26ca85954a681ad8680bf400c662a0a9b089faa84cf3dec4f764bf2d981bc32a" name="libguestfs-tools" arch="noarch">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="30d3d3a79652faa325f28a96442dab8786b1b2e0473629cdac4093cf58b1e40f" name="libguestfs-tools-c" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="e328b34fe8d528854d10732e9b6c6c95de8dc98a0e5ec957d6d760547ec7f5ab" name="libguestfs-tools-c" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="5fbe9d22a0afaf7494a96770baff45d4200322f724ce68b5900fbc4468d26909" name="libguestfs-xfs" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="840c081f0549859f683dcb83b91d7344efc22b5b0d192e76198bbb1935c0f474" name="libguestfs-xfs" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="ad52283ef134176771e74e2ba98378e62c7fef9e7dcb90fa4447954cfa7a889b" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="f3e7c1619417eb3f452e44435aadbb0b19f5300721726bd735a624eda67f6570" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="19b751a125dc7810d6ef1a1743eb97d94dab889fad4b774dfddecdd3dd92e3f4" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="7d90ac8ab0e8cb12de49cee601706cca864fa45a11a1aaa07cff8aa35c123556" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="5ba6c8e42c9aa936bcdb10f5b816184443494166ab65a4e695168d1bb7a462c5" name="libkadm5" arch="i686">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="0604774e83bb6b90ba648eda6f9660369ce72e1a373b6b4f6b80b92f5d786329" name="libkadm5" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="37.el7_7.2"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1605756</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1645711</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el7_7.1" date="1564056000">- Remove incorrect KDC assertion
- Resolves: #1732339</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37.el_7_7.2" date="1564056001">- Prefer TCP to UDP for password changes
- Resolves: #1732743</changelog>
</package>
<package pkgid="9595b8a3f933a206e94cfe7d2659324cf320eaa65610f4b5f899d6a672180106" name="libmount" arch="i686">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="ca07d2c9b22f01f2e8ae8945ec1a0d61710800cb919d06fe48236a90e4597646" name="libmount" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="0048213de1912a30256ee00a34e2facf798f538c48f054865bf820e003b74e71" name="libmount-devel" arch="i686">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="91782d0b9f6451a01b47c949ac1bed33e013138dc4af077cbf9bc302ca8ba923" name="libmount-devel" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="9bfd5c338330966824a0bc69db60f518020017410abbd99f0ac8b9e553898e94" name="libnetfilter_cthelper" arch="i686">
  <version epoch="0" ver="1.0.0" rel="10.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-7" date="1433937600">- Resolves: rhbz#1233222 Add libnetfilter_cthelper package to RHEL-7</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-8" date="1444824000">- Resolves: rhbz#1233222 (do not include examples/ as these become arch specific)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-9" date="1469448000">- Resolves: rhbz#1252344 Use after free in nfct_helper_free</changelog>
  <changelog author="Phil Sutter - 1.0.0-10" date="1552305600">- Resolves: rhbz#1256215 - double free happened when nfct_helper_free() [...]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-10.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="a41579710a55ab7ee49fc100909812743fc98bbd0dbe9a5e2ad900e11777d969" name="libnetfilter_cthelper" arch="src">
  <version epoch="0" ver="1.0.0" rel="10.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-7" date="1433937600">- Resolves: rhbz#1233222 Add libnetfilter_cthelper package to RHEL-7</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-8" date="1444824000">- Resolves: rhbz#1233222 (do not include examples/ as these become arch specific)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-9" date="1469448000">- Resolves: rhbz#1252344 Use after free in nfct_helper_free</changelog>
  <changelog author="Phil Sutter - 1.0.0-10" date="1552305600">- Resolves: rhbz#1256215 - double free happened when nfct_helper_free() [...]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-10.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="8a52bd1327b927b411a687815c1b2a48ba5f267927971c2a8f1a80f6d1e08f33" name="libnetfilter_cthelper" arch="src">
  <version epoch="0" ver="1.0.0" rel="10.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-7" date="1433937600">- Resolves: rhbz#1233222 Add libnetfilter_cthelper package to RHEL-7</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-8" date="1444824000">- Resolves: rhbz#1233222 (do not include examples/ as these become arch specific)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-9" date="1469448000">- Resolves: rhbz#1252344 Use after free in nfct_helper_free</changelog>
  <changelog author="Phil Sutter - 1.0.0-10" date="1552305600">- Resolves: rhbz#1256215 - double free happened when nfct_helper_free() [...]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-10.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="948537e1641aa16e87285ef67a3ff1deda6f3d5354dffe86473b0bc4c57b187d" name="libnetfilter_cthelper" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="10.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-7" date="1433937600">- Resolves: rhbz#1233222 Add libnetfilter_cthelper package to RHEL-7</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-8" date="1444824000">- Resolves: rhbz#1233222 (do not include examples/ as these become arch specific)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-9" date="1469448000">- Resolves: rhbz#1252344 Use after free in nfct_helper_free</changelog>
  <changelog author="Phil Sutter - 1.0.0-10" date="1552305600">- Resolves: rhbz#1256215 - double free happened when nfct_helper_free() [...]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-10.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="d98459c8eaccfc03588205c56e6627a29cedfa4df5b8767d6d3c8e7c0d17bf01" name="libnetfilter_cthelper-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.0" rel="10.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-7" date="1433937600">- Resolves: rhbz#1233222 Add libnetfilter_cthelper package to RHEL-7</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-8" date="1444824000">- Resolves: rhbz#1233222 (do not include examples/ as these become arch specific)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-9" date="1469448000">- Resolves: rhbz#1252344 Use after free in nfct_helper_free</changelog>
  <changelog author="Phil Sutter - 1.0.0-10" date="1552305600">- Resolves: rhbz#1256215 - double free happened when nfct_helper_free() [...]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-10.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="88fa42cd6614c3510af416de60aec735fb095629619c37109078b91905b2a45a" name="libnetfilter_cthelper-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="10.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-7" date="1433937600">- Resolves: rhbz#1233222 Add libnetfilter_cthelper package to RHEL-7</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-8" date="1444824000">- Resolves: rhbz#1233222 (do not include examples/ as these become arch specific)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-9" date="1469448000">- Resolves: rhbz#1252344 Use after free in nfct_helper_free</changelog>
  <changelog author="Phil Sutter - 1.0.0-10" date="1552305600">- Resolves: rhbz#1256215 - double free happened when nfct_helper_free() [...]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-10.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="84bd57f0412d3d068beaaff3cd8ddfebad8434a5338099042b81b58dfb6ece3b" name="libnetfilter_cthelper-devel" arch="i686">
  <version epoch="0" ver="1.0.0" rel="10.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-7" date="1433937600">- Resolves: rhbz#1233222 Add libnetfilter_cthelper package to RHEL-7</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-8" date="1444824000">- Resolves: rhbz#1233222 (do not include examples/ as these become arch specific)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-9" date="1469448000">- Resolves: rhbz#1252344 Use after free in nfct_helper_free</changelog>
  <changelog author="Phil Sutter - 1.0.0-10" date="1552305600">- Resolves: rhbz#1256215 - double free happened when nfct_helper_free() [...]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-10.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="7b1246cfb76c3766730a11d24c709d2a7dcfac2b53b1191459d39bdb38c9808b" name="libnetfilter_cthelper-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="10.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-7" date="1433937600">- Resolves: rhbz#1233222 Add libnetfilter_cthelper package to RHEL-7</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-8" date="1444824000">- Resolves: rhbz#1233222 (do not include examples/ as these become arch specific)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-9" date="1469448000">- Resolves: rhbz#1252344 Use after free in nfct_helper_free</changelog>
  <changelog author="Phil Sutter - 1.0.0-10" date="1552305600">- Resolves: rhbz#1256215 - double free happened when nfct_helper_free() [...]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-10.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="c8d56307864037725877b0d7746b6bd4a629f2d185aad8740e73965421a948f8" name="libnetfilter_cttimeout" arch="i686">
  <version epoch="0" ver="1.0.0" rel="6.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-6" date="1434715200">- Resolves: rhbz#1233221 Add libnetfilter_cttimeout package to RHEL-7</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-6.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="74cdc23df1f0cc0621e6c302bec0ade8b60def13ba0e730c4318b0b71c430527" name="libnetfilter_cttimeout" arch="src">
  <version epoch="0" ver="1.0.0" rel="6.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-6" date="1434715200">- Resolves: rhbz#1233221 Add libnetfilter_cttimeout package to RHEL-7</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-6.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="8d2fcea61456982e2c9d949bc5ba3a052bae5976e266d8d554c76b2ab9e61344" name="libnetfilter_cttimeout" arch="src">
  <version epoch="0" ver="1.0.0" rel="6.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-6" date="1434715200">- Resolves: rhbz#1233221 Add libnetfilter_cttimeout package to RHEL-7</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-6.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="1a1ee0e2be384fb3bd062f8f9950d593827dad2ca17f19003c29215fe2d34d8f" name="libnetfilter_cttimeout" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="6.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-6" date="1434715200">- Resolves: rhbz#1233221 Add libnetfilter_cttimeout package to RHEL-7</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-6.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="4716fffd791a9aaff1e96e32217ae43264cb5416ccc82223358719e5b3dbb403" name="libnetfilter_cttimeout-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.0" rel="6.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-6" date="1434715200">- Resolves: rhbz#1233221 Add libnetfilter_cttimeout package to RHEL-7</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-6.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="b7906f2080c4c9e90b08f122676f6c22d1a7d41e0b9813c998e286a36a3064d4" name="libnetfilter_cttimeout-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="6.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-6" date="1434715200">- Resolves: rhbz#1233221 Add libnetfilter_cttimeout package to RHEL-7</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-6.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="afcd6590deb75cd3db65dfa2902058d5ab06b0f07250b721d0b1cd22e156d1f8" name="libnetfilter_cttimeout-devel" arch="i686">
  <version epoch="0" ver="1.0.0" rel="6.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-6" date="1434715200">- Resolves: rhbz#1233221 Add libnetfilter_cttimeout package to RHEL-7</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-6.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="a31f806c668cb2133794ba759ffa83f7fc22e0102f5afa24c145d3713f83d256" name="libnetfilter_cttimeout-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="6.el7_7.1"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.0.0-6" date="1434715200">- Resolves: rhbz#1233221 Add libnetfilter_cttimeout package to RHEL-7</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-6.1" date="1567771200">- Rebuild for inclusion into s390x.</changelog>
</package>
<package pkgid="f915d86c85cf74eb829216c304a2c1fc12305579c74a0e77e1db6a641ed7aa92" name="libreswan" arch="i686">
  <version epoch="0" ver="3.25" rel="8.1.el7_7"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1524830400">- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
- Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-1" date="1530100800">- Resolves: rhbz#1591817 rebase libreswan to 3.25
- Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs &gt;= 1.6.6</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-2" date="1530532800">- Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-5" date="1545307200">- Resolves: rhbz#1639404 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
- Resolves: rhbz#1629902 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
- Resolves: rhbz#1623279 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11
- Resolves: rhbz#1625303 config: recursive include check doesn't work
- Resolves: rhbz#1664521 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are &gt;= 3072 bits</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-6" date="1549281600">- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated]
- Resolves: rhbz#1679735 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-7" date="1551268800">- Resolves: rhbz#1673105 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-8" date="1557230400">- Resolves: rhbz#1686991 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-8.1" date="1566993600">- Resolves: rhbz#1746052 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire [rhel-7.7.z]</changelog>
</package>
<package pkgid="0f172c32453ab28359c2e738b2be57b722a880c026830639d38368bfb3d24e99" name="libreswan" arch="src">
  <version epoch="0" ver="3.25" rel="8.1.el7_7"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1524830400">- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
- Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-1" date="1530100800">- Resolves: rhbz#1591817 rebase libreswan to 3.25
- Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs &gt;= 1.6.6</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-2" date="1530532800">- Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-5" date="1545307200">- Resolves: rhbz#1639404 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
- Resolves: rhbz#1629902 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
- Resolves: rhbz#1623279 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11
- Resolves: rhbz#1625303 config: recursive include check doesn't work
- Resolves: rhbz#1664521 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are &gt;= 3072 bits</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-6" date="1549281600">- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated]
- Resolves: rhbz#1679735 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-7" date="1551268800">- Resolves: rhbz#1673105 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-8" date="1557230400">- Resolves: rhbz#1686991 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-8.1" date="1566993600">- Resolves: rhbz#1746052 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire [rhel-7.7.z]</changelog>
</package>
<package pkgid="a801ed68f810bcc50148212021b5bc8112a1f2feb8f72da238d4d535d61eb129" name="libreswan" arch="src">
  <version epoch="0" ver="3.25" rel="8.1.el7_7"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1524830400">- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
- Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-1" date="1530100800">- Resolves: rhbz#1591817 rebase libreswan to 3.25
- Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs &gt;= 1.6.6</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-2" date="1530532800">- Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-5" date="1545307200">- Resolves: rhbz#1639404 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
- Resolves: rhbz#1629902 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
- Resolves: rhbz#1623279 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11
- Resolves: rhbz#1625303 config: recursive include check doesn't work
- Resolves: rhbz#1664521 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are &gt;= 3072 bits</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-6" date="1549281600">- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated]
- Resolves: rhbz#1679735 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-7" date="1551268800">- Resolves: rhbz#1673105 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-8" date="1557230400">- Resolves: rhbz#1686991 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-8.1" date="1566993600">- Resolves: rhbz#1746052 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire [rhel-7.7.z]</changelog>
</package>
<package pkgid="a279246eccbde54399a345d2df65add5f27c6aabcf5212a7907c8855c4df59e4" name="libreswan" arch="x86_64">
  <version epoch="0" ver="3.25" rel="8.1.el7_7"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1524830400">- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
- Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-1" date="1530100800">- Resolves: rhbz#1591817 rebase libreswan to 3.25
- Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs &gt;= 1.6.6</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-2" date="1530532800">- Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-5" date="1545307200">- Resolves: rhbz#1639404 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
- Resolves: rhbz#1629902 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
- Resolves: rhbz#1623279 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11
- Resolves: rhbz#1625303 config: recursive include check doesn't work
- Resolves: rhbz#1664521 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are &gt;= 3072 bits</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-6" date="1549281600">- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated]
- Resolves: rhbz#1679735 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-7" date="1551268800">- Resolves: rhbz#1673105 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-8" date="1557230400">- Resolves: rhbz#1686991 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-8.1" date="1566993600">- Resolves: rhbz#1746052 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire [rhel-7.7.z]</changelog>
</package>
<package pkgid="68a9ed3c9fcd4d95ff98232a2437d278ae8e3aabc3b89e1556042e6a4785264b" name="libreswan-debuginfo" arch="i686">
  <version epoch="0" ver="3.25" rel="8.1.el7_7"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1524830400">- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
- Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-1" date="1530100800">- Resolves: rhbz#1591817 rebase libreswan to 3.25
- Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs &gt;= 1.6.6</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-2" date="1530532800">- Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-5" date="1545307200">- Resolves: rhbz#1639404 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
- Resolves: rhbz#1629902 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
- Resolves: rhbz#1623279 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11
- Resolves: rhbz#1625303 config: recursive include check doesn't work
- Resolves: rhbz#1664521 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are &gt;= 3072 bits</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-6" date="1549281600">- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated]
- Resolves: rhbz#1679735 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-7" date="1551268800">- Resolves: rhbz#1673105 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-8" date="1557230400">- Resolves: rhbz#1686991 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-8.1" date="1566993600">- Resolves: rhbz#1746052 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire [rhel-7.7.z]</changelog>
</package>
<package pkgid="8c27d63f29fe8df4e33493f4f554120e9487377bb62839659e35e25d3dbc873f" name="libreswan-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.25" rel="8.1.el7_7"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1524830400">- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
- Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-1" date="1530100800">- Resolves: rhbz#1591817 rebase libreswan to 3.25
- Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs &gt;= 1.6.6</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-2" date="1530532800">- Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-5" date="1545307200">- Resolves: rhbz#1639404 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
- Resolves: rhbz#1629902 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
- Resolves: rhbz#1623279 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11
- Resolves: rhbz#1625303 config: recursive include check doesn't work
- Resolves: rhbz#1664521 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are &gt;= 3072 bits</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-6" date="1549281600">- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated]
- Resolves: rhbz#1679735 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-7" date="1551268800">- Resolves: rhbz#1673105 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-8" date="1557230400">- Resolves: rhbz#1686991 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-8.1" date="1566993600">- Resolves: rhbz#1746052 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire [rhel-7.7.z]</changelog>
</package>
<package pkgid="4324e47521820b143e0f20b6ef8c642a412f44ba663bfbb2738203d3ec10b3ca" name="libsmartcols" arch="i686">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="811833cbbebc6cefc5c2b4ae5c44041d6e31069b9019eba668c2150b1abc42fb" name="libsmartcols" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="3ac1a78602643ef105a531ca39c91cf83e08455ae5d3bf814b97ca82f01cb920" name="libsmartcols-devel" arch="i686">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="c8cb48342f25f2870d2f34080e7a88a9874dd6dbbc0f3be416116d9ca3c70217" name="libsmartcols-devel" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="0dd91f5474c08a29da65c18d71f5b515f551055b7a9e0a73f844a968d4543b8c" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="cc78b23b75ad742e0b04be5c2568d8f09b4226cbaf53a147ff31bcdd48a967c4" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="6fed3c26a8733e0de3d1fc08c43df007cfa894c9d8fabb09be5f893ed9769cfa" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="63425006c3a88ceb0895593dd7cb9cb385413286ae8f1de3d4443db6830b4fff" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="5f16505a95f2667c3094ef85157e66466af0b2f2c919a4894942ea9c3a3adc32" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="0606875dcf8f4206479627844f77d1afb1ef022382608f9c21e3bddd1c544747" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="17f15fd3616cc26c531a5404f1475647a4fbe4c8bb2367490bebbedb7cc22445" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="2f5de73c4e6aad3f95f47148d2f13076fcafda37ac97bdc33038429590169050" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="b1b24cadd86b6df60e4bbb07f0d41056f4d7971342c3e9d9c13ed4582742f769" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="d810ad3d63a56f08b9ec3cd836a327d4343d85205e88c4bfbc34fccde3137d2e" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="ca8e92c5ebf5a710d98170e49030fe103f7220e9f657a3ec23a6a4179ffae619" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="07b69373c18bf8e243e8d2fa200be1fe9d9fcba20a4b502a5dfe51acba6a743f" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="0253e5b331ef34c834ef9f3c82705bf5d39115dc6cb9093fa90c85a67a37f894" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="5af5c28ea4337b190500c8ba7448a344bc44687dfb95d41d9ee813ab19f88dab" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="d281d63a87d8b53cdf198b90a04b98e69aca3f40b94f75d15b67ea7677b8c61d" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="46bdeed5b14a64c2c157d62f87492e0a09709b2e1f698474649cc9a6ba8309cf" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="3bc4e40e2369c2e1296e8f257661656a48b6c4433b01dfbd1c61ff41a2cbddcf" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="3f4b04a982fe10d9b485a3576d42e6233be29270414ce740098686aa417b92cb" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="96da59a8f2701ad8368ef9ae9de6cafec575c4c8bf3f3f0f6aa9f2e6922528e6" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="226755e649174e6ff6b41f803c652ca81e1a9e09ad6c1e4c46718c532475349a" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="554ee289d305015f22ffa5f03c4ef3a3dfe6dea5aa963fcdb3b6761f18ffa6a0" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="f67cd8587a3f306af0db4eae80fc58a27cf3328ee22979bf9eac5fb90f36a6b4" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="9921a06a02d092582fd4d6c8fe8a37763d57ceae4f97d331b14907229b36cc51" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="bac9d2c6a9b8e6d8ffaafbce0f0e14dd044ebc8d687b364f4771259fbfb356ed" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="71b4730e8d467bde0ae1e07a7c00ff34926a085a451139bd2cb1db017cbf952b" name="libuuid" arch="i686">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="98633117ee4b1b006870f97dbe9deefe933db4e5c3834a7dedb0d8721eedd784" name="libuuid" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="03b1728173d2b88a3618466c792a2efa415875928cc6bec07e083f535c3e192e" name="libuuid-devel" arch="i686">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="d252bd9ed742c7e59966a96a9b42e831a05fb40afa7053d92e91f899b53653e2" name="libuuid-devel" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="68c7c71731e9b9149756557babbea05fe5bb7a6fa52f316233df56dd96f7c07d" name="libvirt" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="327e648f901b6da916506a9f38a18051a61bf723d58c65649ad2c8356cbb4ec7" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="ee8e4b3b2ec768f2965a099d7b166aa0ebaf2621924ab62607ff2e3276bd7a03" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="72c9617415992e2cf6b7d6cf998b3c04a01a7c4dd1fe2a91b105e6b3d9a4e966" name="libvirt" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="c1ffbe6bb8dddb4c44915e086c51c9128b8b922f6e479ef60ea589b30c1363e7" name="libvirt" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="247897238f298d7343b176bccbef258e431c06552ea350cb043f0af676f54fe3" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="d52b170b64c66196d7cbbe8a30c019b514537399e29cd71b31f1d057807653af" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="81d3eb15490575304e0bac226fd4f854bb86c9588c2e4b0ac54a03a5ee40c095" name="libvirt" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="099397bbadcd4b29a7f953039962f8fac44c03245871b38488d442174f8a2d77" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="2143d578315652b569b36b45bada6a107bf87559dbe88265e57ac633dec31dbc" name="libvirt" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="5cd2e4dbbf2223168c20485bccce960c9261edff35d1dd3eb88e3c8d18b73ab9" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="df33264be683841f250938464cc5728afce7617d2266de7161f360b3868bb659" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="465df316c02375cf7f55d2a13ba2a15fb0cb24521fa7305568d480d0e440fe13" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="d69a1de9271dc1307cee160e1c980abe29866cd6d47fa77658a2437b9928f9cf" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="d517921860563d9b7d0c5fd3c13d49504f12130b7cc7cb2db589f06b3777dc93" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="9297bb8ab65482f16599d71e638f61a9ee55f44a4540286750bf28032668d2fe" name="libvirt-bash-completion" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="0e5897f7f17e219f9fc5127ca478189a7a7cbde12b78588f3c2f65814ff2cc3c" name="libvirt-bash-completion" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="42ee5d38039f49570197e808b45b3554ca71002f31498dbba60570052c4a1097" name="libvirt-bash-completion" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="a42b0265b24129d67eab0449206108fd38219495954af0f0220bc3055f757cf1" name="libvirt-bash-completion" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="3d5a424ad357620f2208430416c26cb240ae5b99b85635cfb66158dd26155b5c" name="libvirt-bash-completion" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="79b5bc9ade80d6db2a175e144af0f92c0449542360f66369b9a63914a2b0b41f" name="libvirt-client" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="165c5cd163200ec85f9d228f26dccfcaaae37a217fe8e8c7c09dd924e3a03204" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="f4b1d77f356e39c55bd8af694f0d107bb1c923e69c3c2421340333d2e0103bc3" name="libvirt-client" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="4497092406cff30ef2bb97f604eab642f39c3789062efb5c7e3ba386e4235d0d" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="d2722deec35919f3794db861649537318c30f911d2afee00d9d7fc8978aa9131" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="796e767783ac74996915e52a2db0fc758e6a70681dd9b1f58f44e7ea80b5a186" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="1c7181f73ba88ff28a23bef33a0c1233862de39104cef62bcec91db6e9ae163a" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="cfb40f027b219c61b6397156d4e29320534dbbc46ee2967e23d9f29458ad98f0" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="a14544505cbec1636d98b0081c9eb15c62ef9641bbba3894b0754a6f5503e12c" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="467f903dad85a2ba0b4290dfe6ad5282bc984e5fe10e2b6bf9bfda0bb6112d02" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="a576b49f2f576632744703ad43b7b9f60e7831d60db2172f25d3a2898672ef1e" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="8cbec8dbcf32eb61406a8e5bab4521c7bc7470eb10d7517020516f67d764aeaa" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="978bc566116d92cb16363c92f6a4dd310ab6abb8445d46eb3b25b2777fb38435" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="2b0e803b693a2c0fe05450c07c0d378627427b01b9d90811030a773cc9326e7f" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="a7330fea6bcbb7b815de82f3fbcdaa38cc58e96e5ff7e760e0c64d07af8aab6b" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="bf8703dccd05345f0b6fe8efca9889ab03051761baf30d6f5a845f4f13d7ac59" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="a04da65a9c32d4082768008c5c0dca701b490bd965dd4c6e02b6cda913da58f7" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="0c3818a704723cb68f771c0ba5705d24ec72a21d1fbd98cd62867fd150893448" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="50e06e6324d2d55422bdabde5da2bfe3b16ec0503ec7fa8f802dddc3667f0e96" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="c4e02354c32f9375bf10282ff6a7d15e82561f88dcd19e41fe4373b798650dae" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="7e067a2dde633480b896c6ba1aeb153d8a5eaca68614d044ab47eba167eace74" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="f22bd765eb81110a0e8d148eb3c7b095ecd87978e9bc0285979fdf905973d247" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="a58290bc22d1808dc10374d0237c675f7117999218bd8ac0fcb324d983debd7c" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="931efea6f1f3bad33d5f78f785152ed981a0c7b8517ad837b7518c893cb1728d" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="d1b40a64c6c0af979104b7be1dc457146b14b8f03dafe4fdf9f4297460d9f41c" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="0fca8e1ad4f3218ed5e8ff6e788c306b14321d217fddea315f7aad9e54e59101" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="697719429050039d36f2dff006135bb3491fc488b6c64d9c8108d804c6c3bdd5" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="45dcc9a1b790cc80dc1c709d4bd10035dbf5ba4787bade902c13ecea58ddede6" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="3e36c659c7da9c3ac4d733ba4299009327343d8247c93cbf4d3258ce4d942aaf" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="5caee4ff1339367a82a361f94079eecd1f6d4fdbee4f19e844bf0eef2431aff9" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="11c0db40b40def8f07b0674e68d2920d703219ce6a888a8163743dcd291b2acf" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="1a51f4a1db23cdf9a8b47071c2b9a9d11311a975c1053836cccd89e76309508f" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="32e10e29b492ab547f0bd28efa7cd45a09f5a2ae7ff7ba0495a27c1e853c3b52" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="31b528e310f176fad9d279859b9afdd570c4b95a060d08061ffe5249350bc1da" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="10ecfd42e2901579109bfcb0648a21dedf394857a0a7cd2f0da47eda97783ca6" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="cb04a695e5c50e7cd262c1e03a8e121ce6f7bd3b67b2cb444de45f295b78c67b" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="d94861ee3fab356ab341961c56c11df5be94153f8669bf1d301b76bdb95d2890" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="1f42bb8684dc9da3d7000b150b7c87a697cd8abcde1530893a230d7f1b9f2676" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="c44bd96db10073e420d9b1d34c3e02f0ff436efadcde92bdd2b374cf8d3b8260" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="978cb45e3940be8e7cc2a967df4b59d0c95a5209bc8124f27b7cec6c90caf1e5" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="0e6e98884680b1ea4190be2f6fe41dc5a4c05a06a3febd14d31079f412df69bb" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="9a9a86c2d3c4f1c431d0f246ad0f4c29337abdbcc4917a96af8c8ee87cf1ffac" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="cfcebaa2486e0831222d9be4b72dd92beb648e1f803ee09751aa961c8c802dbc" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="322a611f17f30956031e14d3182ffefacfd7351d03da0c720c081b97b6377ac2" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="7d0bfb29868516349435a1f65269a10bf2901d5720f89d7c748834b45659e160" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="34aa81db9e99d06bd20402d67092b36534cab739786213cf876cd4ce48268be2" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="6987a83fa9c9db9ea050a6d94e3648e80c903bfffecd18d1b04bc9ca861c4733" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="f933095986fc4dfb86c8fea33e4cbb04d3cfb3fc640a3387471ed08f1af1b356" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="06cc698dfdf6565cda58edebaba49bac5e799e3dd4604db88331902f32128390" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="2cc08943757e082338a057c966792848fefcdc861127d377fc2c793e0ba74e81" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="38c00ea154dc7b805ce7ce5813cab738227dadc8834075748cdc232a542da6a1" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="7db57f1711b03d26db010669185d6cc10c28725c1b47eb7abec72ec3c9a75957" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="7ba8cd3e760ad6f438ac374fdc7d946fc31c62aa8aea2f27ffa34e20086ff885" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="e59761c25af3b59da6391ec39d99594c46860cc3ca9af87cf6e5aab8e303ad97" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="155d21c7fb5ebbdb53fc2dfb4ba8dd382b2989c2117fbef0864c904ca16d30bc" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="c4b156c75fc230e8a45f6ceb1f58b53f915aaeb01c0a49b05bc9ef0e519759d8" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="0b92a5e03f271127e24bef8abb64ed850c993a867e177550c66da53a165239db" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="211eb0174eb45e86300da9182d61188bbc8d22bdfd1c906842075afaebac9bbe" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="39b6576b9bae756ee8468baeae75d155f254001c8a4d0f3546504cb5bb1f74ca" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="f2c70706189d817246c3bf71e4a883ad91301ff2187ac5c73d5caf0b28529210" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="3e91920bc193674b1edbf43ea6f428ef065fa7ff2d548ba4d3ce29f7aac0e61a" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="aa3c89aa10aef21393e1bcd29394bfacc010faaa3cefd817e1432a72e171fbe8" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="fa80a33afc80bfcb4afccd63e17106eb9b62821aca256330cc75d8f417921036" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="bf30ae21d0e5fafb82ddadf7a29230931a18676f2099acc4b245c31072d3ce41" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="06b6e731f0c6f60d56785fa5af07b7570d6e8c1824bb402555909da9968bd8e7" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="9071b5f8d19e5570cb3f15dbc68d4625fd07f25cbe4f5c83d33b99815ca92046" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="5811778956d7e7f4d746d4b85d1a368f38fa7f14a699e6aaad1d633c1dab472e" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="a6c6c92fe62791a6c3916873362d2ebe486fb5568e6a52b222e5358261a3a156" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="dbd9bdc22bcd8996c2dd17417b32ee8c672aa1e211d077790a453d2472d479de" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="1f35cc14024e0209fe9c2ead7560b4055d9fc987212706ed58519c60ede1b4a7" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="6511c441e98b8236678a544b4b0f496455ce19f65080d127b651f1e808e0cbf0" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="5cb690414a51ca243dbb2e1a60936026c551d8236a7cef1176df6a5d304b0127" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="9e7dc7a93e8d213a8eeace4271442085e659002033f731a276cc9c902fc10f95" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="d78b4983ab45fd8149429a17255479499799670412428f48b9a654e9dc16f2bf" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="44dd8e4387f319a3f8ff0aed223ef0ece1f57d408c4d1da03fd19325d2ea5356" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="f9faff95b02cb19d606fde9c7463c054b662db14d33475410ca41ab927fbc1e0" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="040473b7a2d9a71c0e3a866848c20074b944ad888c208df6f2f3f3f362f267c2" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="f5e00d6d1d30f1979f5d7c0204cd612d857c86147b992e2b12b3d3590990f219" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="42db178a8a15b377e64a7e85f3152e565973a401a20bec27b643a2d0c4392722" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="69e6522ccd02e368f34ec9ab021b8e8bdd0c44cb1d3364db8f729fbdee9c6880" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="e2ecc2829e685f017f82d6e9c107f6a3cbfc787f6fcce798d18d34826a1043ce" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="fd87de122760322c08d5de9b12089e60144fc5bc07dd25d7bcfac8119852bc47" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="419080d42ad0d5a2077edfa1dbe347a0437dcf393e02a0df49bdd8c7eba0d527" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="9a2ed1412b21102512c3120bf532248491b7f7d9941f6bc1b9f29d951a807f19" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="a6a01cc9f7249aaa8187de81b66f9f32cd0b67a31585ed7b855f0abfc6b1f423" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="d5e8931c0a493e439c734be104ca6ebe0bcd53a914b35e3926e3b0e067fbed91" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="7474ac4042138fc7d30be3f809251f3a54fb7e0124d63dd77770f4603af4f9cc" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="64251bcc7ee4c9af602c1d15bb7e330bb54cc3b3c9931b7d0e8eddeeca0ec4c0" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="ddcb4810dcee5f22e407c369e24d7a797bfadf54de97e35c4bdaf0a51d818381" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="adc5d82387b5aef3c24dcec07808856e272cd7214d57c8828e694597bc30b5fd" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="b342f6a5a10de1b9c1e7284ec494586dbe56bdf96e85e1837bec88e9dffea36a" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="c47ab7eeee4713dafb5f43cfedd4be8dd45c894fc269e1bcd26a7917738c3bae" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="5922e29adf8dd836ef1f4a990c47fc58e6e8849d82415121bc88a06870987266" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="00797534e95c72ec25ddac82a14ea9a4f2b5a0480f8fd1f6f045e942eb7fe08d" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="6a19abd15d22726fab532996bc93fc9e6a54b6233301ec36529636bb21429f85" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="172e78e6b89c7a34dc65307405ceda2d949609627c8a8883428aaffd19cfbfd8" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="eb1f536967842e0b0aee3f527092fbce90fdd5102c395aa8f43e9220375acba8" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="4f3554f7a502fcfd2dea1b7878d564dc70ddb90be44cec061a5655bb770609d1" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="c1ff60af8bade26703a76612605f93c483714e2bf7f786bf686522466fa4c9f2" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="132e533fafd97d4c6f054e00f10ae4d5403e2f3f081b3d955d5bb5e8a3e9eaae" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="85a3b1b2f0510fd6caac2025ba99ee8c2a628e3fd775b2d3bc4c91ebdf8d6b97" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="710669021f9f1fc85099bb8379472c0d462ccbbfa7def5f641fec5e66b7082f8" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="1c34852b00aaacb4298200c9934aa97683da1444980d926a88ddb34a80238b56" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="d8253c3fd4ba54a7daaeca81c0fb3294913aac489ef47ae09d841a5c04702239" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="1d1974661792e9363fc65935c1cb9a3a7463a75f4ed17d38f2b1b6905576b036" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="3fd056df5679afeb17dfdb770223ad207e2ce8a7b7af5f530de8bbdefd93afdd" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="15dc967db1e34eed4d22e3ba3c3d5181c9b694d1d60279112405ae0e5d6282fe" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="904b8cc0b0aa677fb4f8b2c568df87d8f067a9ad65f6c1cf710aff7d731d02aa" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="be069a2d80c447ae268ab64c1a5c90be6a8700d17ec40cdc60c7aa61a539d740" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="793749b195a1df190fecf10016f060befea4d62f59f78a9cc0ddb8e4938cb392" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="e610502f221e0d829724edd8b1642d66b56ee31b1d4afc64a216158f6a08ca74" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="792d2f9bc7473f438fe61235f262542a6aeeeb2c91c833614883dd3cd276ec9a" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="b5dbca7bfdec88757eded397a6d5f69ec900ad10bb25666c52f893d67e6b1c86" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="96874bcc644217cf939fd061fbf92f75cbdc11d5735725abd417c2219c8efe50" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="aa8e62c63202785ab8e4cf15ab668bb41e2cb70bdc2451e5110397e159456047" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="e65e3db8ac08bae06b41e3ae853c3c0db410db3b4118fd8c36aa4d37ab657f44" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="252a75a76e2e4eae9ab7600dcc5ba22346cb9ee6547ffbc4bda92046397a88ba" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="fb4e6b20ef10dd7dbb5635a27c0c2f82b6a47b940ff7cdd7c68c49bac3e3f3d9" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="4d6aa955c310fa1ec70c4d29c6e93f0ab558ef67fefbae5d603548792aac65d1" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="a069298c2f69cf207e576a35e90490d685f021b34118ce3087535960d94554d2" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="3bffac59a14d10aea26b450a2cafcd5ca437fbb803e0dcd05a9d590bc07661e1" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="1362022bf0258482226415c28903fef3ddad9b97ecbcc749f997d0e1419c090a" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="17cc8a3038c271062a9bb6f16c89ce830de117907aa11c2269fc880121d38e13" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="c40c00cbd180a21f271dc262897310bcb15c06dbfbc06dbfed9566d0d522ec4e" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="535c5c486f0dc0387155da56c7a4c8818a241c7a5fe7707c0e4527109e413b8e" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="08c21119ddaef67b191d9b66ded0e09162b5a88492c9b95e3f93482b61c7387a" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="e4af84ed96af2a4839319c40de179f059212f792adaa2655df80406512ec77d7" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="0f2fbe63fa4c9d03a4706dbe70586ddcb7715758dc0390ac69ccb26e788bbd21" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="0a630f897196e658f02ffec65c8ba04d85da8be7ef1ff0da2a713e8d9dea0ebf" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="04d7d17b4d8c6a54474e92a2be9daa8f571fa90dde113fe025c9c0740b267073" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="6406ea97aadc3c458550b6fd41ed9f3f59bbd5aab0dbd2f28634a6f868dd4f94" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="f988ecfb833187a36d7bcacf44b1df45b18508cc832d304e9f90d180ed41631d" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-15" date="1556193600">- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-16" date="1556884800">- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
</package>
<package pkgid="f0d689118e52cce02b3cf997c32654e6fa0580ee3daad4b23a2c826db82d316b" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="4500a88d6d44d876ee2ace525de286d9f523b39e7e99bd00d4da69e1672ba951" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-17" date="1557835200">- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-18" date="1558440000">- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
</package>
<package pkgid="5f712bd87555cd111d86389aa6d820008fdc3fe07c065b43b6b747a7bc6f3b65" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="23.el7_7.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-19" date="1559649600">- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-20" date="1559649601">- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-21" date="1559822400">- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-22" date="1560340800">- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23" date="1561032000">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.1" date="1565956800">- qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1742023)
- qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1742023)
- qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1742023)
- qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1742023)
- qemu: Fix crash on incoming migration (rhbz#1742023)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.2" date="1571054400">- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1760470)
- test: Introduce virnetdevopenvswitchtest (rhbz#1760470)
- vircommand: Separate mass FD closing into a function (rhbz#1760470)
- virCommand: use procfs to learn opened FDs (rhbz#1760470)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1760470)
- util: Avoid possible error in virCommandMassClose (rhbz#1760470)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.3" date="1572264000">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1766086)
- domain_conf: Relax SCSI addr used check (rhbz#1766086)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.4" date="1574424000">- qemu: Forcibly mknod() even if it exists (rhbz#1775680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-23.el7_7.5" date="1578916800">- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1787556)</changelog>
</package>
<package pkgid="abedaefa3f89147ee9a645e224351a1d0f37f74e179b4901ad0cfaf1fea43277" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="345efc291387a0d94c309a60f80cb0db0dd9866464d3cc4cab043be105aeee5c" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="4d1a0616a6ff068dc375cd8228a12ff79d77fde01bc2b10a3449f3a1ce850b25" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="8065504e3af13f3f4ab02b8da8add9b7846f317dcbfeadd0792f7df990e554b5" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="0106a28579b36572988f8d196a6e116ba1f79b6f36c86d557256c3f04ea62875" name="lua-guestfs" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="d1d208b338b55d4def33d03e2d0e1ff5be271bfb3330b95e10a447b87f70eff2" name="lua-guestfs" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="a28a9eb224346e74a3886f81dcef2126500dd2a91297ed19b439255a986cf196" name="lvm2" arch="i686">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="7b80eea1dc5376a984554d16a51eb6fa54fca16fe35dbe01e98ecfc235b0a7a1" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="a1f9bb437b38ea24c7157b2a86ac2d7547aea90a0d3f7d47ced09fc7efbf15bc" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="c30740aa01e492400a9479e9d2a5db1c71d616a0b8241c247037d32a5514a714" name="lvm2" arch="x86_64">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="cd961aef141a0c7afd57d9616393beab0b726ef7ea02799f80f3c2086bc3c482" name="lvm2-cluster" arch="i686">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="abad981ccbda4be38692514f1a17fd1c302d920ee4730368c052b6a6dd7ca5ef" name="lvm2-cluster" arch="x86_64">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="5d5b620cedd74cea4b0ac971171f698b3a5a9b5e3a334957f9146098d1398bd7" name="lvm2-cluster-standalone" arch="i686">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="388d99c77e5892867054adce048c0f5fe0b0b9aadbef915c77117904b084c2d4" name="lvm2-cluster-standalone" arch="x86_64">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="948cd648e6f4dd178bd351df44de20e986f10fdc824b149d4173e6ea185f8a84" name="lvm2-debuginfo" arch="i686">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="21a49812487d7b4da4d8e1e0f9a10f8efa51b19683d18f632c3687b6de2bc07a" name="lvm2-debuginfo" arch="x86_64">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="a55003be3655f28e6d0d27cc62668e0ec30445d186655b665c4b5b6a7e216e7a" name="lvm2-devel" arch="i686">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="7e3747e39055db29df389983fcb0ec3cdd2b7235aea4ce162113e5fc23838afe" name="lvm2-devel" arch="x86_64">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="1ec76a33b8a5d32442943ca13bed53009ddf498cc49b770f6cf1d098bf778abf" name="lvm2-libs" arch="i686">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="b5d17bad5d54903e9ad63c321d193235cc50be99db5c7b2351bd8189df58dec4" name="lvm2-libs" arch="x86_64">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="392ff61d3eca477e54b3da6bb11038706cf321b4a63b9ba02660fb9ce717fdb3" name="lvm2-lockd" arch="i686">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="ed613ec741d0bbea0417bfa53dcc443f10ef6476206abc409af6b2b11be8c10f" name="lvm2-lockd" arch="x86_64">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="3c10039c844d2db44e6dbd1769ed44d81f7084513aeaa1f946fbdcd4959afc44" name="lvm2-python-boom" arch="noarch">
  <version epoch="7" ver="0.9" rel="18.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="e2dc9185c9f4f7a939dffda897bf5d20588d7d2d433207050b74b8fa628f3e1e" name="lvm2-python-boom" arch="noarch">
  <version epoch="7" ver="0.9" rel="18.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="dcdf99281af43b0911d6a2de88e61b79de93989b166e4bf8259c1b85f517e97c" name="lvm2-python-libs" arch="i686">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="faa4825ad5d6eef77e9b32a4a2131cd2d3386ac95683455372ff3b18a1f078eb" name="lvm2-python-libs" arch="x86_64">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="1fed7471cf5530c0a6af7fa34b8bd9b9099d361a8de0d016ef073df1d3c45c3e" name="lvm2-sysvinit" arch="i686">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="00b7fa7dff1366d14fa3eab65377671ba292e99b942e7b72c60ac00de4fd695c" name="lvm2-sysvinit" arch="x86_64">
  <version epoch="7" ver="2.02.185" rel="2.el7_7.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-1" date="1553256000">- See WHATS_NEW and WHATS_NEW_DM in the documentation directory for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-2" date="1555502400">- Add support for vgsplit with cached devices.
- Fix conversion of cache pool to RAID1 (2.02.184).
- Fix signal delivery checking race in libdaemon (lvmetad).
- Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.184-3" date="1556539200">- Fix shutdown of deamons.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-1" date="1557748800">- Fix change of monitoring in clustered volumes.
- Improve -lXXX%VG modifier which improves cache segment estimation.
- Add synchronization with udev before removing cached devices.
- Fix missing growth of _pmspare volume when extending _tmeta volume.
- Automatically grow thin metadata, when thin data gets too big.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2" date="1561118400">- Fix cluster conversions from linear to mirror.
- Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
- Prevent shared active mirror LVs with lvmlockd.
- Parsing of cache status understand no_discard_passdown.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.1" date="1566820800">- Allow stripes in mirror conversions. 
- Fix rounding of writes to sector size.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.185-2.el7_7.2" date="1566907200">- Fix potential memory leak.</changelog>
</package>
<package pkgid="d6c3d3dbf744b143f551bdea6047ccda1524a972e6249f333e787dc8da8ad5a7" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="53.2.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-46" date="1535630400">- Fix dracut module checks in Host-Only mode.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-47" date="1536148800">- Add 7.3.z kernel version to kernel_early configuration.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-48" date="1537444800">- Fix %postun script (#1628629)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-49" date="1555329600">- Intel CPU microcode update to 20190312.
- Add "Provides:" tags generation.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-50" date="1557403200">- Intel CPU microcode update to 20190507_Public_DEMO.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
</package>
<package pkgid="3e09dcec688ca48d9f1cec8c342070df54377b4478a741cb9e7587532ab4fabb" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="53.2.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-46" date="1535630400">- Fix dracut module checks in Host-Only mode.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-47" date="1536148800">- Add 7.3.z kernel version to kernel_early configuration.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-48" date="1537444800">- Fix %postun script (#1628629)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-49" date="1555329600">- Intel CPU microcode update to 20190312.
- Add "Provides:" tags generation.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-50" date="1557403200">- Intel CPU microcode update to 20190507_Public_DEMO.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
</package>
<package pkgid="7a3900f7df9199325a844f0a1d37811b14e4c7c0617129760743c5026694adc9" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="53.2.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-46" date="1535630400">- Fix dracut module checks in Host-Only mode.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-47" date="1536148800">- Add 7.3.z kernel version to kernel_early configuration.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-48" date="1537444800">- Fix %postun script (#1628629)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-49" date="1555329600">- Intel CPU microcode update to 20190312.
- Add "Provides:" tags generation.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-50" date="1557403200">- Intel CPU microcode update to 20190507_Public_DEMO.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
</package>
<package pkgid="434fbe49cba07feaba10210a15d9d322f5bda3b97f0288cde2c93a6b4c32aa55" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="53.2.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-46" date="1535630400">- Fix dracut module checks in Host-Only mode.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-47" date="1536148800">- Add 7.3.z kernel version to kernel_early configuration.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-48" date="1537444800">- Fix %postun script (#1628629)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-49" date="1555329600">- Intel CPU microcode update to 20190312.
- Add "Provides:" tags generation.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-50" date="1557403200">- Intel CPU microcode update to 20190507_Public_DEMO.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
</package>
<package pkgid="e66a0efeef868cb98e997e95a40cb049ac9d3cbb76466686670bf48a3506e863" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="53.3.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-47" date="1536148800">- Add 7.3.z kernel version to kernel_early configuration.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-48" date="1537444800">- Fix %postun script (#1628629)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-49" date="1555329600">- Intel CPU microcode update to 20190312.
- Add "Provides:" tags generation.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-50" date="1557403200">- Intel CPU microcode update to 20190507_Public_DEMO.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.3" date="1573128000">- Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
  CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764050, #1764070, #1764949,
    - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
  - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
  - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
  - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
    to 0xd4
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.
- Rework dracut hook to address dracut's early initramfs generation
  behaviour.</changelog>
</package>
<package pkgid="a5841af1df5d548ebaf6cfcd83bafe6c37f8c343551517ae051a9aa63c0e8daa" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="53.3.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-47" date="1536148800">- Add 7.3.z kernel version to kernel_early configuration.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-48" date="1537444800">- Fix %postun script (#1628629)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-49" date="1555329600">- Intel CPU microcode update to 20190312.
- Add "Provides:" tags generation.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-50" date="1557403200">- Intel CPU microcode update to 20190507_Public_DEMO.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.3" date="1573128000">- Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
  CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764050, #1764070, #1764949,
    - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
  - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
  - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
  - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
    to 0xd4
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.
- Rework dracut hook to address dracut's early initramfs generation
  behaviour.</changelog>
</package>
<package pkgid="30d596270f22df9c2de9506f2eac84c038e665e625a7992243b62b51a40d9fd0" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="53.3.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-47" date="1536148800">- Add 7.3.z kernel version to kernel_early configuration.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-48" date="1537444800">- Fix %postun script (#1628629)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-49" date="1555329600">- Intel CPU microcode update to 20190312.
- Add "Provides:" tags generation.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-50" date="1557403200">- Intel CPU microcode update to 20190507_Public_DEMO.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.3" date="1573128000">- Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
  CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764050, #1764070, #1764949,
    - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
  - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
  - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
  - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
    to 0xd4
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.
- Rework dracut hook to address dracut's early initramfs generation
  behaviour.</changelog>
</package>
<package pkgid="ee242dfc0dac4875195476f867236f9d3a374fa09f21c5994b86b34f7e42e83c" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="53.3.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-47" date="1536148800">- Add 7.3.z kernel version to kernel_early configuration.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-48" date="1537444800">- Fix %postun script (#1628629)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-49" date="1555329600">- Intel CPU microcode update to 20190312.
- Add "Provides:" tags generation.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-50" date="1557403200">- Intel CPU microcode update to 20190507_Public_DEMO.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.3" date="1573128000">- Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
  CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764050, #1764070, #1764949,
    - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
  - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
  - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
  - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
    to 0xd4
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.
- Rework dracut hook to address dracut's early initramfs generation
  behaviour.</changelog>
</package>
<package pkgid="42669f98a9f53a9fafbc757b0c0b4641ef3d44710f5e2b668924c5ba4306a981" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="53.7.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.3" date="1573128000">- Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
  CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764050, #1764070, #1764949,
    - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
  - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
  - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
  - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
    to 0xd4
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.
- Rework dracut hook to address dracut's early initramfs generation
  behaviour.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.4" date="1574251200">- Package the publicy available microcode-20191112 release (#1773962):
  - Addition of 06-4d-08/0x1 (AVN B0/C0) microcode at revision 0x12d;
  - Addition of 06-55-06/0xbf (CSL-SP B0) microcode at revision 0x400002c;
  - Addition of 06-7a-08/0x1 (GLK R0) microcode at revision 0x16;
  - Update of 06-55-03/0x97 (SKL-SP B1) microcode from revision 0x1000150
    up to 0x1000151;
  - Update of 06-55-04/0xb7 (SKL-SP H0/M0/U0, SKL-D M1) microcode from revision
    0x2000064 up to 0x2000065;
  - Update of 06-55-07/0xbf (CSL-SP B1) microcode from revision 0x500002b
    up to 0x500002c;
  - Update of 06-7a-01/0x1 (GLK B0) microcode from revision 0x2e up to 0x32;
- Include 06-9e-0c (CFL-H/S P0) microcode from the microcode-20190918 release.
- Correct the releasenote file (0001-releasenote-changes-summary-fixes.patch).
- Update README.caveats with the link to the new Knowledge Base article.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.5" date="1574251201">- Update Intel CPU microcode to microcode-20191113 release:
  - Update of 06-9e-0c (CFL-H/S P0) microcode from revision 0xae up to 0xc6.
- Drop 0001-releasenote-changes-summary-fixes.patch.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.6" date="1574251202">- Update Intel CPU microcode to microcode-20191115 release:
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) from revision 0xd4 up to 0xd6;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) from revision 0xd4
    up to 0xd6;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0c/0x94 (AML-Y V0, CML-U 4+2 V0, WHL-U V0) from revision
    0xc6 up to 0xca;
  - Update of 06-9e-09/0x2a (KBL-G/X H0, KBL-H/S/Xeon E3 B0) from revision 0xc6
    up to 0xca;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0b/0x02 (CFL-S B0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0c/0x22 (CFL-S/Xeon E P0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0d/0x22 (CFL-H/S R0) from revision 0xc6 up to 0xca;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) from revision 0xc6 up to 0xca.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.7" date="1575288000">- Do not update 06-55-04 (SKL-SP/W/X) to revision 0x2000065, use 0x2000064
  by default (#1774329).</changelog>
</package>
<package pkgid="22fb2ee7789c4a02f7e8b37b91c5e666cdd714e4961415d85c4af8eaf4fc59cc" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="53.7.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.3" date="1573128000">- Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
  CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764050, #1764070, #1764949,
    - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
  - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
  - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
  - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
    to 0xd4
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.
- Rework dracut hook to address dracut's early initramfs generation
  behaviour.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.4" date="1574251200">- Package the publicy available microcode-20191112 release (#1773962):
  - Addition of 06-4d-08/0x1 (AVN B0/C0) microcode at revision 0x12d;
  - Addition of 06-55-06/0xbf (CSL-SP B0) microcode at revision 0x400002c;
  - Addition of 06-7a-08/0x1 (GLK R0) microcode at revision 0x16;
  - Update of 06-55-03/0x97 (SKL-SP B1) microcode from revision 0x1000150
    up to 0x1000151;
  - Update of 06-55-04/0xb7 (SKL-SP H0/M0/U0, SKL-D M1) microcode from revision
    0x2000064 up to 0x2000065;
  - Update of 06-55-07/0xbf (CSL-SP B1) microcode from revision 0x500002b
    up to 0x500002c;
  - Update of 06-7a-01/0x1 (GLK B0) microcode from revision 0x2e up to 0x32;
- Include 06-9e-0c (CFL-H/S P0) microcode from the microcode-20190918 release.
- Correct the releasenote file (0001-releasenote-changes-summary-fixes.patch).
- Update README.caveats with the link to the new Knowledge Base article.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.5" date="1574251201">- Update Intel CPU microcode to microcode-20191113 release:
  - Update of 06-9e-0c (CFL-H/S P0) microcode from revision 0xae up to 0xc6.
- Drop 0001-releasenote-changes-summary-fixes.patch.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.6" date="1574251202">- Update Intel CPU microcode to microcode-20191115 release:
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) from revision 0xd4 up to 0xd6;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) from revision 0xd4
    up to 0xd6;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0c/0x94 (AML-Y V0, CML-U 4+2 V0, WHL-U V0) from revision
    0xc6 up to 0xca;
  - Update of 06-9e-09/0x2a (KBL-G/X H0, KBL-H/S/Xeon E3 B0) from revision 0xc6
    up to 0xca;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0b/0x02 (CFL-S B0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0c/0x22 (CFL-S/Xeon E P0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0d/0x22 (CFL-H/S R0) from revision 0xc6 up to 0xca;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) from revision 0xc6 up to 0xca.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.7" date="1575288000">- Do not update 06-55-04 (SKL-SP/W/X) to revision 0x2000065, use 0x2000064
  by default (#1774329).</changelog>
</package>
<package pkgid="ad3089479946ed499089473ee2e30a3bcd6c97c44711506dbc0a3405b424969e" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="53.7.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.3" date="1573128000">- Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
  CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764050, #1764070, #1764949,
    - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
  - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
  - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
  - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
    to 0xd4
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.
- Rework dracut hook to address dracut's early initramfs generation
  behaviour.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.4" date="1574251200">- Package the publicy available microcode-20191112 release (#1773962):
  - Addition of 06-4d-08/0x1 (AVN B0/C0) microcode at revision 0x12d;
  - Addition of 06-55-06/0xbf (CSL-SP B0) microcode at revision 0x400002c;
  - Addition of 06-7a-08/0x1 (GLK R0) microcode at revision 0x16;
  - Update of 06-55-03/0x97 (SKL-SP B1) microcode from revision 0x1000150
    up to 0x1000151;
  - Update of 06-55-04/0xb7 (SKL-SP H0/M0/U0, SKL-D M1) microcode from revision
    0x2000064 up to 0x2000065;
  - Update of 06-55-07/0xbf (CSL-SP B1) microcode from revision 0x500002b
    up to 0x500002c;
  - Update of 06-7a-01/0x1 (GLK B0) microcode from revision 0x2e up to 0x32;
- Include 06-9e-0c (CFL-H/S P0) microcode from the microcode-20190918 release.
- Correct the releasenote file (0001-releasenote-changes-summary-fixes.patch).
- Update README.caveats with the link to the new Knowledge Base article.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.5" date="1574251201">- Update Intel CPU microcode to microcode-20191113 release:
  - Update of 06-9e-0c (CFL-H/S P0) microcode from revision 0xae up to 0xc6.
- Drop 0001-releasenote-changes-summary-fixes.patch.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.6" date="1574251202">- Update Intel CPU microcode to microcode-20191115 release:
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) from revision 0xd4 up to 0xd6;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) from revision 0xd4
    up to 0xd6;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0c/0x94 (AML-Y V0, CML-U 4+2 V0, WHL-U V0) from revision
    0xc6 up to 0xca;
  - Update of 06-9e-09/0x2a (KBL-G/X H0, KBL-H/S/Xeon E3 B0) from revision 0xc6
    up to 0xca;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0b/0x02 (CFL-S B0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0c/0x22 (CFL-S/Xeon E P0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0d/0x22 (CFL-H/S R0) from revision 0xc6 up to 0xca;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) from revision 0xc6 up to 0xca.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.7" date="1575288000">- Do not update 06-55-04 (SKL-SP/W/X) to revision 0x2000065, use 0x2000064
  by default (#1774329).</changelog>
</package>
<package pkgid="0b938c26e1059e56effaddae2d331fc6d26c6086c87066e84e6274786eebaceb" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="53.7.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.3" date="1573128000">- Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
  CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764050, #1764070, #1764949,
    - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
  - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
  - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
  - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
    to 0xd4
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.
- Rework dracut hook to address dracut's early initramfs generation
  behaviour.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.4" date="1574251200">- Package the publicy available microcode-20191112 release (#1773962):
  - Addition of 06-4d-08/0x1 (AVN B0/C0) microcode at revision 0x12d;
  - Addition of 06-55-06/0xbf (CSL-SP B0) microcode at revision 0x400002c;
  - Addition of 06-7a-08/0x1 (GLK R0) microcode at revision 0x16;
  - Update of 06-55-03/0x97 (SKL-SP B1) microcode from revision 0x1000150
    up to 0x1000151;
  - Update of 06-55-04/0xb7 (SKL-SP H0/M0/U0, SKL-D M1) microcode from revision
    0x2000064 up to 0x2000065;
  - Update of 06-55-07/0xbf (CSL-SP B1) microcode from revision 0x500002b
    up to 0x500002c;
  - Update of 06-7a-01/0x1 (GLK B0) microcode from revision 0x2e up to 0x32;
- Include 06-9e-0c (CFL-H/S P0) microcode from the microcode-20190918 release.
- Correct the releasenote file (0001-releasenote-changes-summary-fixes.patch).
- Update README.caveats with the link to the new Knowledge Base article.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.5" date="1574251201">- Update Intel CPU microcode to microcode-20191113 release:
  - Update of 06-9e-0c (CFL-H/S P0) microcode from revision 0xae up to 0xc6.
- Drop 0001-releasenote-changes-summary-fixes.patch.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.6" date="1574251202">- Update Intel CPU microcode to microcode-20191115 release:
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) from revision 0xd4 up to 0xd6;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) from revision 0xd4
    up to 0xd6;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0c/0x94 (AML-Y V0, CML-U 4+2 V0, WHL-U V0) from revision
    0xc6 up to 0xca;
  - Update of 06-9e-09/0x2a (KBL-G/X H0, KBL-H/S/Xeon E3 B0) from revision 0xc6
    up to 0xca;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0b/0x02 (CFL-S B0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0c/0x22 (CFL-S/Xeon E P0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0d/0x22 (CFL-H/S R0) from revision 0xc6 up to 0xca;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) from revision 0xc6 up to 0xca.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.7" date="1575288000">- Do not update 06-55-04 (SKL-SP/W/X) to revision 0x2000065, use 0x2000064
  by default (#1774329).</changelog>
</package>
<package pkgid="f5d82e47dc70f758f1658187a13a272c89227a74a08551a8874e0f35424a8c9d" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="53.2.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-46" date="1535630400">- Fix dracut module checks in Host-Only mode.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-47" date="1536148800">- Add 7.3.z kernel version to kernel_early configuration.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-48" date="1537444800">- Fix %postun script (#1628629)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-49" date="1555329600">- Intel CPU microcode update to 20190312.
- Add "Provides:" tags generation.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-50" date="1557403200">- Intel CPU microcode update to 20190507_Public_DEMO.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
</package>
<package pkgid="82c7165a6a3261492ec11598c8e32d9138c5ba9257dd3fa994286dfd938af892" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="53.2.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-46" date="1535630400">- Fix dracut module checks in Host-Only mode.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-47" date="1536148800">- Add 7.3.z kernel version to kernel_early configuration.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-48" date="1537444800">- Fix %postun script (#1628629)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-49" date="1555329600">- Intel CPU microcode update to 20190312.
- Add "Provides:" tags generation.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-50" date="1557403200">- Intel CPU microcode update to 20190507_Public_DEMO.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
</package>
<package pkgid="33db426201e7fd1306e7f80a86b0b803eabc9b27da5248ebacb7e25513ca4445" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="53.3.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-47" date="1536148800">- Add 7.3.z kernel version to kernel_early configuration.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-48" date="1537444800">- Fix %postun script (#1628629)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-49" date="1555329600">- Intel CPU microcode update to 20190312.
- Add "Provides:" tags generation.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-50" date="1557403200">- Intel CPU microcode update to 20190507_Public_DEMO.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.3" date="1573128000">- Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
  CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764050, #1764070, #1764949,
    - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
  - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
  - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
  - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
    to 0xd4
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.
- Rework dracut hook to address dracut's early initramfs generation
  behaviour.</changelog>
</package>
<package pkgid="a791dc8470f13e457d898fd91711b9819e3383189d9430df0f256e5dcdff76cb" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="53.3.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-47" date="1536148800">- Add 7.3.z kernel version to kernel_early configuration.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-48" date="1537444800">- Fix %postun script (#1628629)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-49" date="1555329600">- Intel CPU microcode update to 20190312.
- Add "Provides:" tags generation.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-50" date="1557403200">- Intel CPU microcode update to 20190507_Public_DEMO.
- Resolves: #1697904.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.3" date="1573128000">- Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
  CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764050, #1764070, #1764949,
    - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
  - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
  - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
  - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
    to 0xd4
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.
- Rework dracut hook to address dracut's early initramfs generation
  behaviour.</changelog>
</package>
<package pkgid="ca9e84f35f9953f27fd2c66e4b42a64202f37cba664fa7235277004f4210d9e2" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="53.7.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.3" date="1573128000">- Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
  CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764050, #1764070, #1764949,
    - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
  - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
  - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
  - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
    to 0xd4
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.
- Rework dracut hook to address dracut's early initramfs generation
  behaviour.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.4" date="1574251200">- Package the publicy available microcode-20191112 release (#1773962):
  - Addition of 06-4d-08/0x1 (AVN B0/C0) microcode at revision 0x12d;
  - Addition of 06-55-06/0xbf (CSL-SP B0) microcode at revision 0x400002c;
  - Addition of 06-7a-08/0x1 (GLK R0) microcode at revision 0x16;
  - Update of 06-55-03/0x97 (SKL-SP B1) microcode from revision 0x1000150
    up to 0x1000151;
  - Update of 06-55-04/0xb7 (SKL-SP H0/M0/U0, SKL-D M1) microcode from revision
    0x2000064 up to 0x2000065;
  - Update of 06-55-07/0xbf (CSL-SP B1) microcode from revision 0x500002b
    up to 0x500002c;
  - Update of 06-7a-01/0x1 (GLK B0) microcode from revision 0x2e up to 0x32;
- Include 06-9e-0c (CFL-H/S P0) microcode from the microcode-20190918 release.
- Correct the releasenote file (0001-releasenote-changes-summary-fixes.patch).
- Update README.caveats with the link to the new Knowledge Base article.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.5" date="1574251201">- Update Intel CPU microcode to microcode-20191113 release:
  - Update of 06-9e-0c (CFL-H/S P0) microcode from revision 0xae up to 0xc6.
- Drop 0001-releasenote-changes-summary-fixes.patch.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.6" date="1574251202">- Update Intel CPU microcode to microcode-20191115 release:
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) from revision 0xd4 up to 0xd6;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) from revision 0xd4
    up to 0xd6;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0c/0x94 (AML-Y V0, CML-U 4+2 V0, WHL-U V0) from revision
    0xc6 up to 0xca;
  - Update of 06-9e-09/0x2a (KBL-G/X H0, KBL-H/S/Xeon E3 B0) from revision 0xc6
    up to 0xca;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0b/0x02 (CFL-S B0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0c/0x22 (CFL-S/Xeon E P0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0d/0x22 (CFL-H/S R0) from revision 0xc6 up to 0xca;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) from revision 0xc6 up to 0xca.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.7" date="1575288000">- Do not update 06-55-04 (SKL-SP/W/X) to revision 0x2000065, use 0x2000064
  by default (#1774329).</changelog>
</package>
<package pkgid="d707f0b2685f6fa983175cda755064459823235ac68f9e7b365f6ef5f0a1b49f" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="53.7.el7_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-51" date="1558353600">- Intel CPU microcode update to 20190514a.
- Resolves: #1711941.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-52" date="1559476800">- Remove disclaimer, as it is not as important now to justify kmsg/log
  pollution; its contents are partially adopted in README.caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53" date="1560945600">- Intel CPU microcode update to 20190618.
- Resolves: #1717241.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.1" date="1568894400">- Intel CPU microcode update to 20190918.
- Add new disclaimer, generated based on relevant caveats.
- Resolves: #1758572.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.2" date="1570363200">- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
  by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.3" date="1573128000">- Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
  CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764050, #1764070, #1764949,
    - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
  - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
  - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
  - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
    to 0xd4
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
    to 0xc6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.
- Rework dracut hook to address dracut's early initramfs generation
  behaviour.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.4" date="1574251200">- Package the publicy available microcode-20191112 release (#1773962):
  - Addition of 06-4d-08/0x1 (AVN B0/C0) microcode at revision 0x12d;
  - Addition of 06-55-06/0xbf (CSL-SP B0) microcode at revision 0x400002c;
  - Addition of 06-7a-08/0x1 (GLK R0) microcode at revision 0x16;
  - Update of 06-55-03/0x97 (SKL-SP B1) microcode from revision 0x1000150
    up to 0x1000151;
  - Update of 06-55-04/0xb7 (SKL-SP H0/M0/U0, SKL-D M1) microcode from revision
    0x2000064 up to 0x2000065;
  - Update of 06-55-07/0xbf (CSL-SP B1) microcode from revision 0x500002b
    up to 0x500002c;
  - Update of 06-7a-01/0x1 (GLK B0) microcode from revision 0x2e up to 0x32;
- Include 06-9e-0c (CFL-H/S P0) microcode from the microcode-20190918 release.
- Correct the releasenote file (0001-releasenote-changes-summary-fixes.patch).
- Update README.caveats with the link to the new Knowledge Base article.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.5" date="1574251201">- Update Intel CPU microcode to microcode-20191113 release:
  - Update of 06-9e-0c (CFL-H/S P0) microcode from revision 0xae up to 0xc6.
- Drop 0001-releasenote-changes-summary-fixes.patch.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.6" date="1574251202">- Update Intel CPU microcode to microcode-20191115 release:
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) from revision 0xd4 up to 0xd6;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) from revision 0xd4
    up to 0xd6;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) from revision 0xc6 up to 0xca;
  - Update of 06-8e-0c/0x94 (AML-Y V0, CML-U 4+2 V0, WHL-U V0) from revision
    0xc6 up to 0xca;
  - Update of 06-9e-09/0x2a (KBL-G/X H0, KBL-H/S/Xeon E3 B0) from revision 0xc6
    up to 0xca;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0b/0x02 (CFL-S B0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0c/0x22 (CFL-S/Xeon E P0) from revision 0xc6 up to 0xca;
  - Update of 06-9e-0d/0x22 (CFL-H/S R0) from revision 0xc6 up to 0xca;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) from revision 0xc6 up to 0xca.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-53.7" date="1575288000">- Do not update 06-55-04 (SKL-SP/W/X) to revision 0x2000065, use 0x2000064
  by default (#1774329).</changelog>
</package>
<package pkgid="f0ddf1411a94061212b8c36712f3cca038cb101081d5661cea257aa71960e856" name="mutter" arch="i686">
  <version epoch="0" ver="3.28.3" rel="11.el7_7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
</package>
<package pkgid="5a8378c6bea4d122d841331e935e35739b245514bf6a952306c739ba9efe0dc5" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="11.el7_7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
</package>
<package pkgid="a83b96af61534b432b5759a11273642edd4f2c1b5c7637a0a5cef27a27c719b8" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="11.el7_7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
</package>
<package pkgid="291874567c6e675e88b9f5946cf33e473977ca1bcd5f49afb3ef49ad44fff081" name="mutter" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="11.el7_7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
</package>
<package pkgid="7e89c1be595612d958c32ed1f7e5619c1fadaa80f5ec3e7667503a2085e30606" name="mutter" arch="i686">
  <version epoch="0" ver="3.28.3" rel="12.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
</package>
<package pkgid="77e0d1731644603a462b0fc880edef925e660aecf5c284dd8f4a4a83902f3a44" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="12.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
</package>
<package pkgid="20beb4118bb21610b768488407acf883198f84ef9969ceea39b13860ea5c4db7" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="12.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
</package>
<package pkgid="28ac8756110d7e803dbe8995eed0864435909836d07890593d293e04c15755d0" name="mutter" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="12.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
</package>
<package pkgid="5633399d7ae9f6a43a716b6ab67ac857b442f3169e6e383a5d6a145a7955a8c5" name="mutter" arch="i686">
  <version epoch="0" ver="3.28.3" rel="14.el7_7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1575374400">- Don't freeze if input happens after many days of inactivity
  Resolves: #1778212</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-14" date="1576152000">- Free close dialog before unmanaging parent
  Related: #1780030</changelog>
</package>
<package pkgid="09b2172e4267d41e4e4857c0d9c2de918611751ce3005ae5b54f93122c4bbdb6" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="14.el7_7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1575374400">- Don't freeze if input happens after many days of inactivity
  Resolves: #1778212</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-14" date="1576152000">- Free close dialog before unmanaging parent
  Related: #1780030</changelog>
</package>
<package pkgid="28d15104e5d4866493db5edd28e11b132861152a16e0fbc94d0a05e0baafc349" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="14.el7_7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1575374400">- Don't freeze if input happens after many days of inactivity
  Resolves: #1778212</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-14" date="1576152000">- Free close dialog before unmanaging parent
  Related: #1780030</changelog>
</package>
<package pkgid="4d59b51b4acab2204a469033cafd6a8130e7ca2938486bf7f43ba77cafeebd9a" name="mutter" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="14.el7_7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1575374400">- Don't freeze if input happens after many days of inactivity
  Resolves: #1778212</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-14" date="1576152000">- Free close dialog before unmanaging parent
  Related: #1780030</changelog>
</package>
<package pkgid="e14830d4112e6c7898063d71b35bb27be20cff02d06290b75aa2e80a4ea02e6d" name="mutter-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="11.el7_7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
</package>
<package pkgid="0bad36e816350015c4a3283fc7ec71a7190d0945a4a9f8fc0dd0b9b0be43c592" name="mutter-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="11.el7_7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
</package>
<package pkgid="639048c8243d6997b9f04e6ce4eda6700cb095ad714f8639fcbfc1fb7dede51f" name="mutter-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="12.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
</package>
<package pkgid="58d524dd3f889828d60c1de523359542b46aa60b0fb88802cdbb8425f8b16851" name="mutter-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="12.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
</package>
<package pkgid="9dc7dda4b1d58ed26cfa72450f57bf1c58a2eb3b9f67703f03b6716da0b08df1" name="mutter-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="14.el7_7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1575374400">- Don't freeze if input happens after many days of inactivity
  Resolves: #1778212</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-14" date="1576152000">- Free close dialog before unmanaging parent
  Related: #1780030</changelog>
</package>
<package pkgid="eb269ece2ece6d67084046b02038a38a36c415e38b8e7bac026e41a4090206ce" name="mutter-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="14.el7_7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1575374400">- Don't freeze if input happens after many days of inactivity
  Resolves: #1778212</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-14" date="1576152000">- Free close dialog before unmanaging parent
  Related: #1780030</changelog>
</package>
<package pkgid="74c86bafdee53b2722e6e5a86fd52cd6fea093828a31594c586b0932f722178e" name="mutter-devel" arch="i686">
  <version epoch="0" ver="3.28.3" rel="11.el7_7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
</package>
<package pkgid="54fe15c7e7e71f2582a9e65d4af9526975de0cb8099da86e3259cf17d9ee7148" name="mutter-devel" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="11.el7_7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
</package>
<package pkgid="057790e33964c3864a989b2cd70b031bb6ad385fcf9793857061c799723822b3" name="mutter-devel" arch="i686">
  <version epoch="0" ver="3.28.3" rel="12.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
</package>
<package pkgid="4627aa9c8aec40403d1352dcbdd1569dce999204f811cc6a42c223f117d670e1" name="mutter-devel" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="12.el7_7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
</package>
<package pkgid="df2be1a275eda6182e28c85eabb6daf93e43cdd887773de412bf16075d215a57" name="mutter-devel" arch="i686">
  <version epoch="0" ver="3.28.3" rel="14.el7_7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1575374400">- Don't freeze if input happens after many days of inactivity
  Resolves: #1778212</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-14" date="1576152000">- Free close dialog before unmanaging parent
  Related: #1780030</changelog>
</package>
<package pkgid="e0bebe7c6177117dd53277ac2ef2619fb5e68d019e3664867a0376f9e81c85e7" name="mutter-devel" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="14.el7_7"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-6" date="1547640000">- Prevent titlebars going off-screen (rhbz#1664407)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552392000">- Backport read system wide monitor configuration patch (#1583825)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1552910400">- Don't ignore current mode when deriving current config (#1581806)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-9" date="1553774400">- Handle lack of RANDR
  Resolves: #1579257</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-10" date="1555502400">- Fix idle monitor race condition
  Resolves: #1636460</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-11" date="1570017600">- Don't loose pointer button grabs
  Resolves: #1756263</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-12" date="1570795200">- Fix crash in meta_monitor_mode_get_resolution()
  Resolves #1760738</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-13" date="1575374400">- Don't freeze if input happens after many days of inactivity
  Resolves: #1778212</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-14" date="1576152000">- Free close dialog before unmanaging parent
  Related: #1780030</changelog>
</package>
<package pkgid="b0b0febb21b37a8f1b627fc48ca835c8592eee88018e54bb0b79f9da406b947e" name="net-snmp" arch="i686">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="fc12f1b954110d5ab6e2780b5c9f07b15ffeb9359cf31e7f1314d146bda03169" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="d7fcd5009fec41360bb25a7e830b7c64f5172599195f853926fd7be848ea6646" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="e28a68fb387498c1594a8843639465fa570793db40494809b07b8352e9fa6838" name="net-snmp" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="a27f8b84f4d7f9066aa624cabc359c535bcba145c9975db56c8db5adbb4b9bf0" name="net-snmp-agent-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="551f0d80801755b1f82bf08f4ab738bbd0df48b9c58d3d37787893ae0ed4e3ad" name="net-snmp-agent-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="4962fe460c38767d80b21a56c76bfc0ff29adca1c2346c557d9d2963253573eb" name="net-snmp-debuginfo" arch="i686">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="d1e32e93b6ec8d551f23d97d3356002160153a2e2ea1f84e6519cfa3f9e6ec64" name="net-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="5e5261970dc82b42af74bec77ac78c9d62600f63d2862579962ec8720e4f8a6e" name="net-snmp-devel" arch="i686">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="f3b9380cfb9fe62dc24261169455a7fabf2c341aef78a5ac86a2ef8c99b9da4d" name="net-snmp-devel" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="3860504c46e15a4af9afef976cbda78cefd9da64147be296f9928494dc037306" name="net-snmp-gui" arch="i686">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="e9fdb4875c0b2d91710d05b31194a8248c08a3f387e924d01c3f6b6b68b3b870" name="net-snmp-gui" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="f85b303335d1dda58c45ac8c492c2e09eb49768ab59b7aac1421c122c2c57f67" name="net-snmp-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="8abcf62690588ec305b500dbf2b671a196db11ccbf8425f72838e71bf6a91f1e" name="net-snmp-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="ddb2cb5f4874a5485f338687233ab25b1c5930e5c80d4ee3faec32e3691fdbf7" name="net-snmp-perl" arch="i686">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="8aa2cfbb8fcde8ecb6583e7cbc65618068f93604b24415e7e45e6c44cacb9f33" name="net-snmp-perl" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="374be2e702c0b424735ff4ad9890ce1e651625a8bf36584b262bf4bac581bba4" name="net-snmp-python" arch="i686">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="01267b621607cbae7a1a590ddfbc34d2b8697b0066bfa51cd3ce76db3810020e" name="net-snmp-python" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="917a5caae2f447734a0dd271e285143e0b390aa141fe8789ab4f2a855ede872a" name="net-snmp-sysvinit" arch="i686">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="e6fda8990b0638d132bba8d4297c63b8f93b9f0be48e4a1eae5cfb317f340491" name="net-snmp-sysvinit" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="b749c0d95042fb56f312ec87cb74e47beb80d1ec5b9cbd23c115be3f535d5891" name="net-snmp-utils" arch="i686">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="fd07064b84606b0b623be7a69124a2476a853e7c1a3e4f1db10bb6de859bb7d7" name="net-snmp-utils" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="43.el7_7.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-37" date="1536235200">- fix fsync issue (#1520761)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-38" date="1543233600">- backport upstream fixes of memory leaks (#1650393)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-39" date="1552996800">- adjust logging of statfs (#1314610)
- link libnetsnmptrapd against MYSQL LIBS (#1468084)
- expand SNMPCONFPATH (#1514501)
- remove date in mailheader (#1585940)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-40" date="1553860800">- add relro flag to MYSQL LIBS patch (#1548084)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.1" date="1566216000">- fix buffer size in pass_common.c file (#1741925)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.2" date="1568721600">- fix memory leak introduced by trap v3 forwarding fix (#1752778)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43.3" date="1575288000">- fix sha224 and sha384 declaration check (#1778733)</changelog>
</package>
<package pkgid="f15adc02ed2d59de86a851dedb34db053d7d9525b18a643dff3f62419e39e7b2" name="nss" arch="i686">
  <version epoch="0" ver="3.44.0" rel="7.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-7" date="1556280000">- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-8" date="1556884800">- Fix policy string</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-9" date="1557489600">- Ignore system policy when running %check</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
  SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1559217600">- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
</package>
<package pkgid="39499987bfbff6e7acb62bd0ee406166a82ec44097cb76dbf12625d11bd41c43" name="nss" arch="src">
  <version epoch="0" ver="3.44.0" rel="7.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-7" date="1556280000">- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-8" date="1556884800">- Fix policy string</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-9" date="1557489600">- Ignore system policy when running %check</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
  SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1559217600">- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
</package>
<package pkgid="9b51668541a2919aa2b250bc3f25e1363cb12bd16ff325cc0413b5c49264ff27" name="nss" arch="src">
  <version epoch="0" ver="3.44.0" rel="7.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-7" date="1556280000">- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-8" date="1556884800">- Fix policy string</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-9" date="1557489600">- Ignore system policy when running %check</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
  SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1559217600">- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
</package>
<package pkgid="e1aab40f811a0e2bbc7afa774b7ddb6eb1a1f3f04c45a1eaeb313ad7dfd1755f" name="nss" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="7.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-7" date="1556280000">- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-8" date="1556884800">- Fix policy string</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-9" date="1557489600">- Ignore system policy when running %check</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
  SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1559217600">- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
</package>
<package pkgid="a31a67427539057136ae6a12e4dcd7a1c30b7297fd93d77d2f9eb06b0dd01e40" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.44.0" rel="7.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-7" date="1556280000">- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-8" date="1556884800">- Fix policy string</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-9" date="1557489600">- Ignore system policy when running %check</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
  SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1559217600">- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
</package>
<package pkgid="b491a64f175b85368b15b4205ce183f8bca76dee01e9ecb4063ff3a8bc800734" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="7.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-7" date="1556280000">- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-8" date="1556884800">- Fix policy string</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-9" date="1557489600">- Ignore system policy when running %check</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
  SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1559217600">- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
</package>
<package pkgid="3da389a7104021a4a3881924684e56977ea2462fbf58e19ebbcc0b2880f7f60f" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.44.0" rel="7.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-7" date="1556280000">- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-8" date="1556884800">- Fix policy string</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-9" date="1557489600">- Ignore system policy when running %check</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
  SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1559217600">- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
</package>
<package pkgid="92873a158b54e5c4dcb39e81f1537cf5442db9ef2ac500f2dcd2221f67289207" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="7.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-7" date="1556280000">- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-8" date="1556884800">- Fix policy string</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-9" date="1557489600">- Ignore system policy when running %check</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
  SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1559217600">- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
</package>
<package pkgid="61f780594dbb1aebc4441e965692116fc84a1abb9d7b422b34b352a233c918df" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.44.0" rel="7.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-7" date="1556280000">- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-8" date="1556884800">- Fix policy string</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-9" date="1557489600">- Ignore system policy when running %check</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
  SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1559217600">- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
</package>
<package pkgid="af8f05a258f8468f93267c5d23eb743fafc8b0211d2708b6b0ec6b7f35180b2d" name="nss-pkcs11-devel" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="7.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-7" date="1556280000">- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-8" date="1556884800">- Fix policy string</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-9" date="1557489600">- Ignore system policy when running %check</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
  SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1559217600">- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
</package>
<package pkgid="dd6eda06ceddf691b2e762bc43c37f6c3cc38a0b7808878004445bd80f68845f" name="nss-softokn" arch="i686">
  <version epoch="0" ver="3.44.0" rel="8.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-4" date="1553688000">- Enable iquote.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-5" date="1556193600">- Restore nss-softokn-fs-probe.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Fix nss-softokn-fs-probe.patch to detect threshold correctly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1558699200">- Remove stray "exit" in %prep</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1558699201">- Add ike mechanisms
- FIPS update</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="fab67ed724ce351a1a6491715b01e3929478610838dfc58014418ef24ef11854" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.44.0" rel="8.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-4" date="1553688000">- Enable iquote.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-5" date="1556193600">- Restore nss-softokn-fs-probe.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Fix nss-softokn-fs-probe.patch to detect threshold correctly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1558699200">- Remove stray "exit" in %prep</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1558699201">- Add ike mechanisms
- FIPS update</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="8482285f37ba66cf4f834bbf6cd9c00a8cf1c9a665f128bfe45dcf0cd6478b55" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.44.0" rel="8.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-4" date="1553688000">- Enable iquote.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-5" date="1556193600">- Restore nss-softokn-fs-probe.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Fix nss-softokn-fs-probe.patch to detect threshold correctly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1558699200">- Remove stray "exit" in %prep</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1558699201">- Add ike mechanisms
- FIPS update</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="e28290041862c3a74911f23e02028c69970100cee03f88dfec7f2b7b14d9412f" name="nss-softokn" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="8.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-4" date="1553688000">- Enable iquote.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-5" date="1556193600">- Restore nss-softokn-fs-probe.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Fix nss-softokn-fs-probe.patch to detect threshold correctly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1558699200">- Remove stray "exit" in %prep</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1558699201">- Add ike mechanisms
- FIPS update</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="129844211cf305a58b92ca83c4530dae35ee33470fe86e6cc972771f8306a981" name="nss-softokn-debuginfo" arch="i686">
  <version epoch="0" ver="3.44.0" rel="8.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-4" date="1553688000">- Enable iquote.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-5" date="1556193600">- Restore nss-softokn-fs-probe.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Fix nss-softokn-fs-probe.patch to detect threshold correctly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1558699200">- Remove stray "exit" in %prep</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1558699201">- Add ike mechanisms
- FIPS update</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="9c03e92fe6933d204c42e7267c3b6c0bebb6c929b2e9fbee73f9a0c487fde93f" name="nss-softokn-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="8.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-4" date="1553688000">- Enable iquote.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-5" date="1556193600">- Restore nss-softokn-fs-probe.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Fix nss-softokn-fs-probe.patch to detect threshold correctly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1558699200">- Remove stray "exit" in %prep</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1558699201">- Add ike mechanisms
- FIPS update</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="0a42d07e457d354cd0ad8dc8b1dfbcd2fe5db81cdf92251f3c007ceb91ff5201" name="nss-softokn-devel" arch="i686">
  <version epoch="0" ver="3.44.0" rel="8.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-4" date="1553688000">- Enable iquote.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-5" date="1556193600">- Restore nss-softokn-fs-probe.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Fix nss-softokn-fs-probe.patch to detect threshold correctly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1558699200">- Remove stray "exit" in %prep</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1558699201">- Add ike mechanisms
- FIPS update</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="106258e985851d0adb88913bbd0b87c487b6b65d5fbc8f0bff67f2207dbd4fd6" name="nss-softokn-devel" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="8.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-4" date="1553688000">- Enable iquote.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-5" date="1556193600">- Restore nss-softokn-fs-probe.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Fix nss-softokn-fs-probe.patch to detect threshold correctly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1558699200">- Remove stray "exit" in %prep</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1558699201">- Add ike mechanisms
- FIPS update</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="2233f2cf15c8d0db17c7e9805f6852917270301822395e1b69e9435a27a5fe6f" name="nss-softokn-freebl" arch="i686">
  <version epoch="0" ver="3.44.0" rel="8.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-4" date="1553688000">- Enable iquote.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-5" date="1556193600">- Restore nss-softokn-fs-probe.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Fix nss-softokn-fs-probe.patch to detect threshold correctly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1558699200">- Remove stray "exit" in %prep</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1558699201">- Add ike mechanisms
- FIPS update</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="3cb0be094b1b317e1ba4cbd793d838ccfd04f1609881c8e6f75834102c7a51a0" name="nss-softokn-freebl" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="8.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-4" date="1553688000">- Enable iquote.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-5" date="1556193600">- Restore nss-softokn-fs-probe.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Fix nss-softokn-fs-probe.patch to detect threshold correctly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1558699200">- Remove stray "exit" in %prep</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1558699201">- Add ike mechanisms
- FIPS update</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="fa16a771e1911655cea9d253ba4fdedc39429109d2d4ebb824624dbabfb3d025" name="nss-softokn-freebl-devel" arch="i686">
  <version epoch="0" ver="3.44.0" rel="8.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-4" date="1553688000">- Enable iquote.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-5" date="1556193600">- Restore nss-softokn-fs-probe.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Fix nss-softokn-fs-probe.patch to detect threshold correctly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1558699200">- Remove stray "exit" in %prep</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1558699201">- Add ike mechanisms
- FIPS update</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="a1d8b42873006fa35f3df67f052323c54d7c11fe5b382182b155b661a2e8bff1" name="nss-softokn-freebl-devel" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="8.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-4" date="1553688000">- Enable iquote.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-5" date="1556193600">- Restore nss-softokn-fs-probe.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Fix nss-softokn-fs-probe.patch to detect threshold correctly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1558699200">- Remove stray "exit" in %prep</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1558699201">- Add ike mechanisms
- FIPS update</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="73fc651074af84943a5d34be4f11534e3f865bde62d0b4ee59ae602ecb094be8" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.44.0" rel="7.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-7" date="1556280000">- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-8" date="1556884800">- Fix policy string</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-9" date="1557489600">- Ignore system policy when running %check</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
  SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1559217600">- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
</package>
<package pkgid="12305326e0c27bf234a8d67197f5b6bd9812aad9529e8c12312b4cb1e49bb7dd" name="nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="7.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-7" date="1556280000">- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-8" date="1556884800">- Fix policy string</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-9" date="1557489600">- Ignore system policy when running %check</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
  SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1559217600">- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
</package>
<package pkgid="efa0faee1289586edd70e9c94ce98f9f78740260220fd456db35fc20fe470700" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.44.0" rel="7.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-7" date="1556280000">- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-8" date="1556884800">- Fix policy string</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-9" date="1557489600">- Ignore system policy when running %check</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
  SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1559217600">- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
</package>
<package pkgid="36b521cc9ae4d4d31a6a5d9ae5f5567f991616b9d10961ec6dde8f1817b17390" name="nss-tools" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="7.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-7" date="1556280000">- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-8" date="1556884800">- Fix policy string</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-9" date="1557489600">- Ignore system policy when running %check</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
  SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-2" date="1558008000">- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-3" date="1559217600">- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
</package>
<package pkgid="a6792df329d70ea143d2ef4c6373dbfc8e62ad8ec2a4ab0cc01dc67b714e422e" name="nss-util" arch="i686">
  <version epoch="0" ver="3.44.0" rel="4.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="566fd62421fc87676c9cf7ca76e5de1bc752c432ba25124d2265e77043c22eb3" name="nss-util" arch="src">
  <version epoch="0" ver="3.44.0" rel="4.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="2027ab6e4ff370017f3c4d4df946e2fb932c68586fdf673533a6858fc4a35ff2" name="nss-util" arch="src">
  <version epoch="0" ver="3.44.0" rel="4.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="b30d0368d79eb1dac06df9e091b4dbe71b39bdd7fe934e21bb918ccfa2dabffa" name="nss-util" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="4.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="8c95b7941b6c8fca20215fb0566491e90e1bc7d00a2d27da5f401ac154748b1c" name="nss-util-debuginfo" arch="i686">
  <version epoch="0" ver="3.44.0" rel="4.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="ff70ae8b9e20d57c34ac4735fac9f52d6aca123f8a5c17ea461225804935b92d" name="nss-util-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="4.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="6cabddae98dfc39598dfe1c6bb9011216e30b6e409400d2753529abcc4ce3988" name="nss-util-devel" arch="i686">
  <version epoch="0" ver="3.44.0" rel="4.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="67a0d9efdb8786086a148655f88da0c39a0551c9c8f8f81abc252647aaceb713" name="nss-util-devel" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="4.el7_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
</package>
<package pkgid="ac38b3f56f2e8854802e82eea62d842153cf7bc78379d1571b13be89e39a06a9" name="numactl" arch="i686">
  <version epoch="0" ver="2.0.12" rel="3.el7_7.1"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-1" date="1382702400">- rebased to version 2.0.9 (bz1017053)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-3" date="1406808000">- Fixed hw detect segfault (bz1061874)
- Fixed printing of preferred node for MPOL_BIND (bz1119887)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-4" date="1415620800">- Fixed missing question mark in dist macro</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-5" date="1435752000">- numa_node_to_cpu skips over non-existing nodes (bz1180415)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-6" date="1450094400">- confusing warning supressed (bz1270734)</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.0.9-7" date="1502193600">- Segment fault when numa nodes not sequential or contiguous
- Resolves: #1219445</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-2" date="1559304000">- numastat: when reading no-exist pid, return EXIT_FAILURE
- Rebase to numactl-2.0.12</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3" date="1559390400">- numastat: bail out if reading no-exist pid</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3.1" date="1571313600">- Fix crashes when using the "--touch" option</changelog>
</package>
<package pkgid="11e2f7753448723a6374af2e9a8df51330e0671b9b963ca70981dd358783dbc6" name="numactl" arch="src">
  <version epoch="0" ver="2.0.12" rel="3.el7_7.1"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-1" date="1382702400">- rebased to version 2.0.9 (bz1017053)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-3" date="1406808000">- Fixed hw detect segfault (bz1061874)
- Fixed printing of preferred node for MPOL_BIND (bz1119887)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-4" date="1415620800">- Fixed missing question mark in dist macro</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-5" date="1435752000">- numa_node_to_cpu skips over non-existing nodes (bz1180415)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-6" date="1450094400">- confusing warning supressed (bz1270734)</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.0.9-7" date="1502193600">- Segment fault when numa nodes not sequential or contiguous
- Resolves: #1219445</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-2" date="1559304000">- numastat: when reading no-exist pid, return EXIT_FAILURE
- Rebase to numactl-2.0.12</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3" date="1559390400">- numastat: bail out if reading no-exist pid</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3.1" date="1571313600">- Fix crashes when using the "--touch" option</changelog>
</package>
<package pkgid="9573fd88268df8474da9c3dc5301ff7e7623bedb05907df193762ee500973894" name="numactl" arch="src">
  <version epoch="0" ver="2.0.12" rel="3.el7_7.1"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-1" date="1382702400">- rebased to version 2.0.9 (bz1017053)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-3" date="1406808000">- Fixed hw detect segfault (bz1061874)
- Fixed printing of preferred node for MPOL_BIND (bz1119887)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-4" date="1415620800">- Fixed missing question mark in dist macro</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-5" date="1435752000">- numa_node_to_cpu skips over non-existing nodes (bz1180415)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-6" date="1450094400">- confusing warning supressed (bz1270734)</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.0.9-7" date="1502193600">- Segment fault when numa nodes not sequential or contiguous
- Resolves: #1219445</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-2" date="1559304000">- numastat: when reading no-exist pid, return EXIT_FAILURE
- Rebase to numactl-2.0.12</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3" date="1559390400">- numastat: bail out if reading no-exist pid</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3.1" date="1571313600">- Fix crashes when using the "--touch" option</changelog>
</package>
<package pkgid="044781d200211f3d6feb813493bdcc992a223ef513598ee63cc920fade57acfe" name="numactl" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="3.el7_7.1"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-1" date="1382702400">- rebased to version 2.0.9 (bz1017053)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-3" date="1406808000">- Fixed hw detect segfault (bz1061874)
- Fixed printing of preferred node for MPOL_BIND (bz1119887)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-4" date="1415620800">- Fixed missing question mark in dist macro</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-5" date="1435752000">- numa_node_to_cpu skips over non-existing nodes (bz1180415)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-6" date="1450094400">- confusing warning supressed (bz1270734)</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.0.9-7" date="1502193600">- Segment fault when numa nodes not sequential or contiguous
- Resolves: #1219445</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-2" date="1559304000">- numastat: when reading no-exist pid, return EXIT_FAILURE
- Rebase to numactl-2.0.12</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3" date="1559390400">- numastat: bail out if reading no-exist pid</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3.1" date="1571313600">- Fix crashes when using the "--touch" option</changelog>
</package>
<package pkgid="cb0775bcd89573041a918302ea414127d408ca4078216e76551aef04cb048ecd" name="numactl-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.12" rel="3.el7_7.1"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-1" date="1382702400">- rebased to version 2.0.9 (bz1017053)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-3" date="1406808000">- Fixed hw detect segfault (bz1061874)
- Fixed printing of preferred node for MPOL_BIND (bz1119887)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-4" date="1415620800">- Fixed missing question mark in dist macro</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-5" date="1435752000">- numa_node_to_cpu skips over non-existing nodes (bz1180415)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-6" date="1450094400">- confusing warning supressed (bz1270734)</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.0.9-7" date="1502193600">- Segment fault when numa nodes not sequential or contiguous
- Resolves: #1219445</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-2" date="1559304000">- numastat: when reading no-exist pid, return EXIT_FAILURE
- Rebase to numactl-2.0.12</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3" date="1559390400">- numastat: bail out if reading no-exist pid</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3.1" date="1571313600">- Fix crashes when using the "--touch" option</changelog>
</package>
<package pkgid="e6c2e1d7910edafeae71207e7d477afb26c0a76fe98cebf95145c9ddf6fbda1a" name="numactl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="3.el7_7.1"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-1" date="1382702400">- rebased to version 2.0.9 (bz1017053)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-3" date="1406808000">- Fixed hw detect segfault (bz1061874)
- Fixed printing of preferred node for MPOL_BIND (bz1119887)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-4" date="1415620800">- Fixed missing question mark in dist macro</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-5" date="1435752000">- numa_node_to_cpu skips over non-existing nodes (bz1180415)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-6" date="1450094400">- confusing warning supressed (bz1270734)</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.0.9-7" date="1502193600">- Segment fault when numa nodes not sequential or contiguous
- Resolves: #1219445</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-2" date="1559304000">- numastat: when reading no-exist pid, return EXIT_FAILURE
- Rebase to numactl-2.0.12</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3" date="1559390400">- numastat: bail out if reading no-exist pid</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3.1" date="1571313600">- Fix crashes when using the "--touch" option</changelog>
</package>
<package pkgid="e53639811b741201ef2eb35ab0c5a2eb2929c857d7192468281fc77f9615cd87" name="numactl-devel" arch="i686">
  <version epoch="0" ver="2.0.12" rel="3.el7_7.1"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-1" date="1382702400">- rebased to version 2.0.9 (bz1017053)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-3" date="1406808000">- Fixed hw detect segfault (bz1061874)
- Fixed printing of preferred node for MPOL_BIND (bz1119887)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-4" date="1415620800">- Fixed missing question mark in dist macro</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-5" date="1435752000">- numa_node_to_cpu skips over non-existing nodes (bz1180415)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-6" date="1450094400">- confusing warning supressed (bz1270734)</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.0.9-7" date="1502193600">- Segment fault when numa nodes not sequential or contiguous
- Resolves: #1219445</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-2" date="1559304000">- numastat: when reading no-exist pid, return EXIT_FAILURE
- Rebase to numactl-2.0.12</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3" date="1559390400">- numastat: bail out if reading no-exist pid</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3.1" date="1571313600">- Fix crashes when using the "--touch" option</changelog>
</package>
<package pkgid="36d16a5ccbffb56a6b1ff420d497be94f1a5fd1ae65f55d1503261fdd3fb7aff" name="numactl-devel" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="3.el7_7.1"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-1" date="1382702400">- rebased to version 2.0.9 (bz1017053)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-3" date="1406808000">- Fixed hw detect segfault (bz1061874)
- Fixed printing of preferred node for MPOL_BIND (bz1119887)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-4" date="1415620800">- Fixed missing question mark in dist macro</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-5" date="1435752000">- numa_node_to_cpu skips over non-existing nodes (bz1180415)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-6" date="1450094400">- confusing warning supressed (bz1270734)</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.0.9-7" date="1502193600">- Segment fault when numa nodes not sequential or contiguous
- Resolves: #1219445</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-2" date="1559304000">- numastat: when reading no-exist pid, return EXIT_FAILURE
- Rebase to numactl-2.0.12</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3" date="1559390400">- numastat: bail out if reading no-exist pid</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3.1" date="1571313600">- Fix crashes when using the "--touch" option</changelog>
</package>
<package pkgid="93e5a3dc18d5bf3195bf4a201b08df5fb8c5254497d166ac353dfdb29d4f70d9" name="numactl-libs" arch="i686">
  <version epoch="0" ver="2.0.12" rel="3.el7_7.1"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-1" date="1382702400">- rebased to version 2.0.9 (bz1017053)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-3" date="1406808000">- Fixed hw detect segfault (bz1061874)
- Fixed printing of preferred node for MPOL_BIND (bz1119887)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-4" date="1415620800">- Fixed missing question mark in dist macro</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-5" date="1435752000">- numa_node_to_cpu skips over non-existing nodes (bz1180415)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-6" date="1450094400">- confusing warning supressed (bz1270734)</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.0.9-7" date="1502193600">- Segment fault when numa nodes not sequential or contiguous
- Resolves: #1219445</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-2" date="1559304000">- numastat: when reading no-exist pid, return EXIT_FAILURE
- Rebase to numactl-2.0.12</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3" date="1559390400">- numastat: bail out if reading no-exist pid</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3.1" date="1571313600">- Fix crashes when using the "--touch" option</changelog>
</package>
<package pkgid="0959223e87a99f71361ee7ce1da3277d19013c1001ac61257658aba3469af6ea" name="numactl-libs" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="3.el7_7.1"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-1" date="1382702400">- rebased to version 2.0.9 (bz1017053)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-3" date="1406808000">- Fixed hw detect segfault (bz1061874)
- Fixed printing of preferred node for MPOL_BIND (bz1119887)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-4" date="1415620800">- Fixed missing question mark in dist macro</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-5" date="1435752000">- numa_node_to_cpu skips over non-existing nodes (bz1180415)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2.0.9-6" date="1450094400">- confusing warning supressed (bz1270734)</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.0.9-7" date="1502193600">- Segment fault when numa nodes not sequential or contiguous
- Resolves: #1219445</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-2" date="1559304000">- numastat: when reading no-exist pid, return EXIT_FAILURE
- Rebase to numactl-2.0.12</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3" date="1559390400">- numastat: bail out if reading no-exist pid</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.12-3.1" date="1571313600">- Fix crashes when using the "--touch" option</changelog>
</package>
<package pkgid="8a3d97405886ab8beaafa03a00768ef4c1d746423baf6edf74235d1a9a2c1324" name="ocaml-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="3d89fba44008b5288f1d14f0c3ec6a47d25d2aed179564c83f7df9246022dd96" name="ocaml-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="0fe40a77e17c36bf256b7f97415d0d28c754ac4d888c1dffa37d06bfdd28c4d7" name="ocaml-libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="e830bd1975cad2367b303773e291aae3f3c8ff8bd54805e6281cc476c27a22db" name="ocaml-libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="c5a2d5d2b539ac8df50a834ee20e45ae0217b5b693721b1778743394c1a0ca05" name="open-vm-tools" arch="i686">
  <version epoch="0" ver="10.3.0" rel="2.el7_7.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.0-3" date="1514548800">- Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
- gdk_set_allowed_backends() is available in version 3.10 and later only.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-4" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 10.2.0-5" date="1525089600">- Rebuild for ICU 61.1</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-1" date="1525867200">- Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
- Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
- Removed wayland-crash.patch which is no longer needed.</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867201">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.2.5-2" date="1526299200">- Updated RHEL version
- Resolves: bz#1527233
  ([ESXi][RHEL7.5]Rebase open-vm-tools to 10.2.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7_7.1" date="1575374400">- ovt-Fix-memory-leaks-in-vix-tools.patch [bz#1772825]
- ovt-End-VGAuth-impersonation-in-the.patch [bz#1772825]
- ovt-Fix-leaks-in-ListAliases-and.patch [bz#1772825]
- Resolves: bz#1772825
  ([ESXi][RHEL7.7.z]Need to backport some severe memory leak fixes from upstream [rhel-7.7.z])</changelog>
</package>
<package pkgid="f94ba4266a2385a1421b49e442efd866f62f2693f14afc53c153c8681ced85cd" name="open-vm-tools" arch="src">
  <version epoch="0" ver="10.3.0" rel="2.el7_7.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.0-3" date="1514548800">- Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
- gdk_set_allowed_backends() is available in version 3.10 and later only.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-4" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 10.2.0-5" date="1525089600">- Rebuild for ICU 61.1</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-1" date="1525867200">- Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
- Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
- Removed wayland-crash.patch which is no longer needed.</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867201">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.2.5-2" date="1526299200">- Updated RHEL version
- Resolves: bz#1527233
  ([ESXi][RHEL7.5]Rebase open-vm-tools to 10.2.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7_7.1" date="1575374400">- ovt-Fix-memory-leaks-in-vix-tools.patch [bz#1772825]
- ovt-End-VGAuth-impersonation-in-the.patch [bz#1772825]
- ovt-Fix-leaks-in-ListAliases-and.patch [bz#1772825]
- Resolves: bz#1772825
  ([ESXi][RHEL7.7.z]Need to backport some severe memory leak fixes from upstream [rhel-7.7.z])</changelog>
</package>
<package pkgid="7463ea0ec43d341c106f7f03ac673cecdbd94c1c9aba5999c9e35fe5c0e8b820" name="open-vm-tools" arch="src">
  <version epoch="0" ver="10.3.0" rel="2.el7_7.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.0-3" date="1514548800">- Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
- gdk_set_allowed_backends() is available in version 3.10 and later only.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-4" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 10.2.0-5" date="1525089600">- Rebuild for ICU 61.1</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-1" date="1525867200">- Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
- Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
- Removed wayland-crash.patch which is no longer needed.</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867201">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.2.5-2" date="1526299200">- Updated RHEL version
- Resolves: bz#1527233
  ([ESXi][RHEL7.5]Rebase open-vm-tools to 10.2.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7_7.1" date="1575374400">- ovt-Fix-memory-leaks-in-vix-tools.patch [bz#1772825]
- ovt-End-VGAuth-impersonation-in-the.patch [bz#1772825]
- ovt-Fix-leaks-in-ListAliases-and.patch [bz#1772825]
- Resolves: bz#1772825
  ([ESXi][RHEL7.7.z]Need to backport some severe memory leak fixes from upstream [rhel-7.7.z])</changelog>
</package>
<package pkgid="f1c536905fbf47516e80ca6cd345200295b2be5f206ecf3dff53f5b3ddf198eb" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="10.3.0" rel="2.el7_7.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.0-3" date="1514548800">- Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
- gdk_set_allowed_backends() is available in version 3.10 and later only.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-4" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 10.2.0-5" date="1525089600">- Rebuild for ICU 61.1</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-1" date="1525867200">- Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
- Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
- Removed wayland-crash.patch which is no longer needed.</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867201">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.2.5-2" date="1526299200">- Updated RHEL version
- Resolves: bz#1527233
  ([ESXi][RHEL7.5]Rebase open-vm-tools to 10.2.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7_7.1" date="1575374400">- ovt-Fix-memory-leaks-in-vix-tools.patch [bz#1772825]
- ovt-End-VGAuth-impersonation-in-the.patch [bz#1772825]
- ovt-Fix-leaks-in-ListAliases-and.patch [bz#1772825]
- Resolves: bz#1772825
  ([ESXi][RHEL7.7.z]Need to backport some severe memory leak fixes from upstream [rhel-7.7.z])</changelog>
</package>
<package pkgid="aa508c60d5b08ea8889e578d1b74a2159b32996d47815734373f7432325831dd" name="open-vm-tools-debuginfo" arch="i686">
  <version epoch="0" ver="10.3.0" rel="2.el7_7.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.0-3" date="1514548800">- Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
- gdk_set_allowed_backends() is available in version 3.10 and later only.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-4" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 10.2.0-5" date="1525089600">- Rebuild for ICU 61.1</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-1" date="1525867200">- Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
- Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
- Removed wayland-crash.patch which is no longer needed.</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867201">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.2.5-2" date="1526299200">- Updated RHEL version
- Resolves: bz#1527233
  ([ESXi][RHEL7.5]Rebase open-vm-tools to 10.2.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7_7.1" date="1575374400">- ovt-Fix-memory-leaks-in-vix-tools.patch [bz#1772825]
- ovt-End-VGAuth-impersonation-in-the.patch [bz#1772825]
- ovt-Fix-leaks-in-ListAliases-and.patch [bz#1772825]
- Resolves: bz#1772825
  ([ESXi][RHEL7.7.z]Need to backport some severe memory leak fixes from upstream [rhel-7.7.z])</changelog>
</package>
<package pkgid="f195a9e5feb1ac9b7cd1907f83a640a290c0a81e4a97c8c492eef9449dd9f4da" name="open-vm-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.3.0" rel="2.el7_7.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.0-3" date="1514548800">- Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
- gdk_set_allowed_backends() is available in version 3.10 and later only.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-4" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 10.2.0-5" date="1525089600">- Rebuild for ICU 61.1</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-1" date="1525867200">- Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
- Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
- Removed wayland-crash.patch which is no longer needed.</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867201">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.2.5-2" date="1526299200">- Updated RHEL version
- Resolves: bz#1527233
  ([ESXi][RHEL7.5]Rebase open-vm-tools to 10.2.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7_7.1" date="1575374400">- ovt-Fix-memory-leaks-in-vix-tools.patch [bz#1772825]
- ovt-End-VGAuth-impersonation-in-the.patch [bz#1772825]
- ovt-Fix-leaks-in-ListAliases-and.patch [bz#1772825]
- Resolves: bz#1772825
  ([ESXi][RHEL7.7.z]Need to backport some severe memory leak fixes from upstream [rhel-7.7.z])</changelog>
</package>
<package pkgid="d57772603dea57b1b1a662965233d1597139ec471dcb7405d8f16872ece3a077" name="open-vm-tools-desktop" arch="i686">
  <version epoch="0" ver="10.3.0" rel="2.el7_7.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.0-3" date="1514548800">- Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
- gdk_set_allowed_backends() is available in version 3.10 and later only.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-4" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 10.2.0-5" date="1525089600">- Rebuild for ICU 61.1</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-1" date="1525867200">- Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
- Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
- Removed wayland-crash.patch which is no longer needed.</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867201">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.2.5-2" date="1526299200">- Updated RHEL version
- Resolves: bz#1527233
  ([ESXi][RHEL7.5]Rebase open-vm-tools to 10.2.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7_7.1" date="1575374400">- ovt-Fix-memory-leaks-in-vix-tools.patch [bz#1772825]
- ovt-End-VGAuth-impersonation-in-the.patch [bz#1772825]
- ovt-Fix-leaks-in-ListAliases-and.patch [bz#1772825]
- Resolves: bz#1772825
  ([ESXi][RHEL7.7.z]Need to backport some severe memory leak fixes from upstream [rhel-7.7.z])</changelog>
</package>
<package pkgid="21bb7343cc1291f362a0d2a66d7600f0585ecf29e5f10210e0d72a84890cbcc1" name="open-vm-tools-desktop" arch="x86_64">
  <version epoch="0" ver="10.3.0" rel="2.el7_7.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.0-3" date="1514548800">- Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
- gdk_set_allowed_backends() is available in version 3.10 and later only.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-4" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 10.2.0-5" date="1525089600">- Rebuild for ICU 61.1</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-1" date="1525867200">- Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
- Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
- Removed wayland-crash.patch which is no longer needed.</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867201">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.2.5-2" date="1526299200">- Updated RHEL version
- Resolves: bz#1527233
  ([ESXi][RHEL7.5]Rebase open-vm-tools to 10.2.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7_7.1" date="1575374400">- ovt-Fix-memory-leaks-in-vix-tools.patch [bz#1772825]
- ovt-End-VGAuth-impersonation-in-the.patch [bz#1772825]
- ovt-Fix-leaks-in-ListAliases-and.patch [bz#1772825]
- Resolves: bz#1772825
  ([ESXi][RHEL7.7.z]Need to backport some severe memory leak fixes from upstream [rhel-7.7.z])</changelog>
</package>
<package pkgid="2acbdab58b4d6299d54d38e3393ad7876c0dc361d90341fd3f2dedb19f2017f2" name="open-vm-tools-devel" arch="i686">
  <version epoch="0" ver="10.3.0" rel="2.el7_7.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.0-3" date="1514548800">- Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
- gdk_set_allowed_backends() is available in version 3.10 and later only.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-4" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 10.2.0-5" date="1525089600">- Rebuild for ICU 61.1</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-1" date="1525867200">- Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
- Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
- Removed wayland-crash.patch which is no longer needed.</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867201">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.2.5-2" date="1526299200">- Updated RHEL version
- Resolves: bz#1527233
  ([ESXi][RHEL7.5]Rebase open-vm-tools to 10.2.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7_7.1" date="1575374400">- ovt-Fix-memory-leaks-in-vix-tools.patch [bz#1772825]
- ovt-End-VGAuth-impersonation-in-the.patch [bz#1772825]
- ovt-Fix-leaks-in-ListAliases-and.patch [bz#1772825]
- Resolves: bz#1772825
  ([ESXi][RHEL7.7.z]Need to backport some severe memory leak fixes from upstream [rhel-7.7.z])</changelog>
</package>
<package pkgid="81b60e79b8a2050d2320ce7b028a0def04e9f965f67e9153fd4e08c480bf47c8" name="open-vm-tools-devel" arch="x86_64">
  <version epoch="0" ver="10.3.0" rel="2.el7_7.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.0-3" date="1514548800">- Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
- gdk_set_allowed_backends() is available in version 3.10 and later only.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-4" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 10.2.0-5" date="1525089600">- Rebuild for ICU 61.1</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-1" date="1525867200">- Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
- Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
- Removed wayland-crash.patch which is no longer needed.</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867201">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.2.5-2" date="1526299200">- Updated RHEL version
- Resolves: bz#1527233
  ([ESXi][RHEL7.5]Rebase open-vm-tools to 10.2.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7_7.1" date="1575374400">- ovt-Fix-memory-leaks-in-vix-tools.patch [bz#1772825]
- ovt-End-VGAuth-impersonation-in-the.patch [bz#1772825]
- ovt-Fix-leaks-in-ListAliases-and.patch [bz#1772825]
- Resolves: bz#1772825
  ([ESXi][RHEL7.7.z]Need to backport some severe memory leak fixes from upstream [rhel-7.7.z])</changelog>
</package>
<package pkgid="bc2dc4bb9b24d54a1eefe6d2a9e37e6f1bd2907e79f23d5e0c9ccb4e0981bd13" name="open-vm-tools-test" arch="i686">
  <version epoch="0" ver="10.3.0" rel="2.el7_7.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.0-3" date="1514548800">- Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
- gdk_set_allowed_backends() is available in version 3.10 and later only.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-4" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 10.2.0-5" date="1525089600">- Rebuild for ICU 61.1</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-1" date="1525867200">- Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
- Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
- Removed wayland-crash.patch which is no longer needed.</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867201">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.2.5-2" date="1526299200">- Updated RHEL version
- Resolves: bz#1527233
  ([ESXi][RHEL7.5]Rebase open-vm-tools to 10.2.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7_7.1" date="1575374400">- ovt-Fix-memory-leaks-in-vix-tools.patch [bz#1772825]
- ovt-End-VGAuth-impersonation-in-the.patch [bz#1772825]
- ovt-Fix-leaks-in-ListAliases-and.patch [bz#1772825]
- Resolves: bz#1772825
  ([ESXi][RHEL7.7.z]Need to backport some severe memory leak fixes from upstream [rhel-7.7.z])</changelog>
</package>
<package pkgid="51e3d6f6121eb515b40f5090455a5601a26be4fda8c020ed4e5e712e09d7f744" name="open-vm-tools-test" arch="x86_64">
  <version epoch="0" ver="10.3.0" rel="2.el7_7.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.0-3" date="1514548800">- Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
- gdk_set_allowed_backends() is available in version 3.10 and later only.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-4" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 10.2.0-5" date="1525089600">- Rebuild for ICU 61.1</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-1" date="1525867200">- Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
- Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
- Removed wayland-crash.patch which is no longer needed.</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867201">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.2.5-2" date="1526299200">- Updated RHEL version
- Resolves: bz#1527233
  ([ESXi][RHEL7.5]Rebase open-vm-tools to 10.2.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2.el7_7.1" date="1575374400">- ovt-Fix-memory-leaks-in-vix-tools.patch [bz#1772825]
- ovt-End-VGAuth-impersonation-in-the.patch [bz#1772825]
- ovt-Fix-leaks-in-ListAliases-and.patch [bz#1772825]
- Resolves: bz#1772825
  ([ESXi][RHEL7.7.z]Need to backport some severe memory leak fixes from upstream [rhel-7.7.z])</changelog>
</package>
<package pkgid="01181fcc6ff05a85f300e915ea687b8c095e4fc3a8ff478b4b4269aba867b788" name="opencryptoki" arch="i686">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="31356cc948d4c8aa8e31c82213a0f2cd7dcd89b9b3a206ff5081246038ed3c4b" name="opencryptoki" arch="src">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="520a599029a88a53e30f75af1d9cb365a7f3ad90c753e714116042a888751fdc" name="opencryptoki" arch="src">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="1493f74bba1ee5caab45af4ae6ce759345b7d91643d2ceb342cc5b5cdb036ded" name="opencryptoki" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="3721ec2a75070a78e4bda12730d94c89ac637dba828cf425618354b92cbc89eb" name="opencryptoki-debuginfo" arch="i686">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="4618c0c15eef37c5a6e45b2374374213d1cde22f944242cfe80c8cad0a76beb9" name="opencryptoki-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="cb991f43dff732206a04fa6e148a79837942635000c9e4f57fe1ba0469ecdf40" name="opencryptoki-devel" arch="i686">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="9ff7c40f17a2136969782608470b0d224480caf5c04a6541d40ce7e562485c47" name="opencryptoki-devel" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="9c75f16e44916d32c42c20c23641342b43e1cbf58e9306db8fb9e80686010489" name="opencryptoki-icsftok" arch="i686">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="10c326826010f763de9eef6b8990ed3ec747f75ff3ad0530888bfd25e0e35abe" name="opencryptoki-icsftok" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="2ab5692a7c1df23c441841cd852888592c8aece19bf63dee562be38dad2803f3" name="opencryptoki-libs" arch="i686">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="6428cf91b4edaaeffa84d6025c667dea287e4725356393b7a7328947c41082c0" name="opencryptoki-libs" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="3284bf9a6240655fc0373d32034c24745681886e27e0b648a2f1c8fba85f5ef2" name="opencryptoki-swtok" arch="i686">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="ded165d61ad490e23d19a8de7192b8af761b578fc3f0869c757a38fa08c11318" name="opencryptoki-swtok" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="fc7909d4be7b9c2ef96572a066478a918b5bf7a282d9770850a8107054a60d54" name="opencryptoki-tpmtok" arch="i686">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="3dbbd345b4784c0eb8cccff9953420ba6830eda2bc9557a7fe228be873ac5c8c" name="opencryptoki-tpmtok" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="5.el7_7"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.5-7" date="1474286400">- Related: RHBZ#1343671 - Make selinux-policy as Conflicts instead of Requires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.6.2-1" date="1487592000">- Rebase opencryptoki to 3.6.2
- Remove patches from spec file applied during 3.5 release
- Resolves: #1391559, #1380784, #1417905</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.7.0-1" date="1507032000">- RHBZ#1456520 - Rebase opencryptoki to 3.7.0
- Include libitm-devel as BuildRequires</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-1" date="1529668800">- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0</changelog>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1572264000">- Resolves: #1766090, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1573041600">- Resolves: #1769258, ICA HW token missing after the package update</changelog>
</package>
<package pkgid="d01edb621b3bac8714d2a4c0d7b947cb512ab96501c992499ce9240f4088f9bf" name="openjpeg2" arch="i686">
  <version epoch="0" ver="2.3.1" rel="2.el7_7"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-3" date="1504180800">- Backport more security fixes, including for CVE-2017-14041 and CVE-2017-14040</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-4" date="1504785600">- Backport fix for CVE-2017-14039</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-1" date="1507204800">- Update to 2.3.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-2" date="1514203200">- Use BUILD_STATIC_LIBS=OFF instead of deleting the static library after build</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-3" date="1514203201">- Rename tool names at cmake level to ensure OpenJPEGTargets.cmake refers to the renamed files</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.3.0-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-6" date="1519041600">- Add missing BR: gcc, make</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-1" date="1556625600">- Rebase to 2.3.1
  resolves: #1704253</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-2" date="1579003200">- Fix CVE-2020-6851
  resolves: #1790586</changelog>
</package>
<package pkgid="bf1b03a08555edf6178b125ed6ee4d2f16a852cb867d06c520636afb81c0aa3e" name="openjpeg2" arch="src">
  <version epoch="0" ver="2.3.1" rel="2.el7_7"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-3" date="1504180800">- Backport more security fixes, including for CVE-2017-14041 and CVE-2017-14040</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-4" date="1504785600">- Backport fix for CVE-2017-14039</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-1" date="1507204800">- Update to 2.3.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-2" date="1514203200">- Use BUILD_STATIC_LIBS=OFF instead of deleting the static library after build</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-3" date="1514203201">- Rename tool names at cmake level to ensure OpenJPEGTargets.cmake refers to the renamed files</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.3.0-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-6" date="1519041600">- Add missing BR: gcc, make</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-1" date="1556625600">- Rebase to 2.3.1
  resolves: #1704253</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-2" date="1579003200">- Fix CVE-2020-6851
  resolves: #1790586</changelog>
</package>
<package pkgid="0011b425e673a48c833c9cc70c30e3770cf88dcb6b08f4665d5c30a52884c650" name="openjpeg2" arch="src">
  <version epoch="0" ver="2.3.1" rel="2.el7_7"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-3" date="1504180800">- Backport more security fixes, including for CVE-2017-14041 and CVE-2017-14040</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-4" date="1504785600">- Backport fix for CVE-2017-14039</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-1" date="1507204800">- Update to 2.3.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-2" date="1514203200">- Use BUILD_STATIC_LIBS=OFF instead of deleting the static library after build</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-3" date="1514203201">- Rename tool names at cmake level to ensure OpenJPEGTargets.cmake refers to the renamed files</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.3.0-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-6" date="1519041600">- Add missing BR: gcc, make</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-1" date="1556625600">- Rebase to 2.3.1
  resolves: #1704253</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-2" date="1579003200">- Fix CVE-2020-6851
  resolves: #1790586</changelog>
</package>
<package pkgid="6e7180af66b6140a45f3580e29bb7a663d04ba0957d48798d99f9072b18d5ab3" name="openjpeg2" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="2.el7_7"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-3" date="1504180800">- Backport more security fixes, including for CVE-2017-14041 and CVE-2017-14040</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-4" date="1504785600">- Backport fix for CVE-2017-14039</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-1" date="1507204800">- Update to 2.3.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-2" date="1514203200">- Use BUILD_STATIC_LIBS=OFF instead of deleting the static library after build</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-3" date="1514203201">- Rename tool names at cmake level to ensure OpenJPEGTargets.cmake refers to the renamed files</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.3.0-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-6" date="1519041600">- Add missing BR: gcc, make</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-1" date="1556625600">- Rebase to 2.3.1
  resolves: #1704253</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-2" date="1579003200">- Fix CVE-2020-6851
  resolves: #1790586</changelog>
</package>
<package pkgid="3ff1e7987fa9a94e0b880992d40761fbb0f7ad7b0258c8577fe33cf1000ad71d" name="openjpeg2-debuginfo" arch="i686">
  <version epoch="0" ver="2.3.1" rel="2.el7_7"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-3" date="1504180800">- Backport more security fixes, including for CVE-2017-14041 and CVE-2017-14040</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-4" date="1504785600">- Backport fix for CVE-2017-14039</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-1" date="1507204800">- Update to 2.3.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-2" date="1514203200">- Use BUILD_STATIC_LIBS=OFF instead of deleting the static library after build</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-3" date="1514203201">- Rename tool names at cmake level to ensure OpenJPEGTargets.cmake refers to the renamed files</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.3.0-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-6" date="1519041600">- Add missing BR: gcc, make</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-1" date="1556625600">- Rebase to 2.3.1
  resolves: #1704253</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-2" date="1579003200">- Fix CVE-2020-6851
  resolves: #1790586</changelog>
</package>
<package pkgid="ebc91afab4ff35bfd4d50af2a743792931fe491d35988855ef3e04eb74be8916" name="openjpeg2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="2.el7_7"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-3" date="1504180800">- Backport more security fixes, including for CVE-2017-14041 and CVE-2017-14040</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-4" date="1504785600">- Backport fix for CVE-2017-14039</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-1" date="1507204800">- Update to 2.3.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-2" date="1514203200">- Use BUILD_STATIC_LIBS=OFF instead of deleting the static library after build</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-3" date="1514203201">- Rename tool names at cmake level to ensure OpenJPEGTargets.cmake refers to the renamed files</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.3.0-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-6" date="1519041600">- Add missing BR: gcc, make</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-1" date="1556625600">- Rebase to 2.3.1
  resolves: #1704253</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-2" date="1579003200">- Fix CVE-2020-6851
  resolves: #1790586</changelog>
</package>
<package pkgid="afee7f233412b9344f7aa31e870981f367c4271e634f32d92efc931b7e94e2a0" name="openjpeg2-devel" arch="i686">
  <version epoch="0" ver="2.3.1" rel="2.el7_7"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-3" date="1504180800">- Backport more security fixes, including for CVE-2017-14041 and CVE-2017-14040</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-4" date="1504785600">- Backport fix for CVE-2017-14039</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-1" date="1507204800">- Update to 2.3.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-2" date="1514203200">- Use BUILD_STATIC_LIBS=OFF instead of deleting the static library after build</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-3" date="1514203201">- Rename tool names at cmake level to ensure OpenJPEGTargets.cmake refers to the renamed files</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.3.0-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-6" date="1519041600">- Add missing BR: gcc, make</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-1" date="1556625600">- Rebase to 2.3.1
  resolves: #1704253</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-2" date="1579003200">- Fix CVE-2020-6851
  resolves: #1790586</changelog>
</package>
<package pkgid="47664fbf3e59409cc3452ef3c2451f687d361870505cf1eef69a7ee3aa3dfe21" name="openjpeg2-devel" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="2.el7_7"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-3" date="1504180800">- Backport more security fixes, including for CVE-2017-14041 and CVE-2017-14040</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-4" date="1504785600">- Backport fix for CVE-2017-14039</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-1" date="1507204800">- Update to 2.3.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-2" date="1514203200">- Use BUILD_STATIC_LIBS=OFF instead of deleting the static library after build</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-3" date="1514203201">- Rename tool names at cmake level to ensure OpenJPEGTargets.cmake refers to the renamed files</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.3.0-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-6" date="1519041600">- Add missing BR: gcc, make</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-1" date="1556625600">- Rebase to 2.3.1
  resolves: #1704253</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-2" date="1579003200">- Fix CVE-2020-6851
  resolves: #1790586</changelog>
</package>
<package pkgid="08cb2499dbe87d7c2877d9b5a3621efbfc17ab743632e7c92df1c2be7f77c0ad" name="openjpeg2-devel-docs" arch="noarch">
  <version epoch="0" ver="2.3.1" rel="2.el7_7"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-3" date="1504180800">- Backport more security fixes, including for CVE-2017-14041 and CVE-2017-14040</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-4" date="1504785600">- Backport fix for CVE-2017-14039</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-1" date="1507204800">- Update to 2.3.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-2" date="1514203200">- Use BUILD_STATIC_LIBS=OFF instead of deleting the static library after build</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-3" date="1514203201">- Rename tool names at cmake level to ensure OpenJPEGTargets.cmake refers to the renamed files</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.3.0-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-6" date="1519041600">- Add missing BR: gcc, make</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-1" date="1556625600">- Rebase to 2.3.1
  resolves: #1704253</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-2" date="1579003200">- Fix CVE-2020-6851
  resolves: #1790586</changelog>
</package>
<package pkgid="28ee3c3427bb9190a0f06a6598f2356bcaf83615a8cdb82a5d5c2ca96af80765" name="openjpeg2-devel-docs" arch="noarch">
  <version epoch="0" ver="2.3.1" rel="2.el7_7"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-3" date="1504180800">- Backport more security fixes, including for CVE-2017-14041 and CVE-2017-14040</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-4" date="1504785600">- Backport fix for CVE-2017-14039</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-1" date="1507204800">- Update to 2.3.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-2" date="1514203200">- Use BUILD_STATIC_LIBS=OFF instead of deleting the static library after build</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-3" date="1514203201">- Rename tool names at cmake level to ensure OpenJPEGTargets.cmake refers to the renamed files</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.3.0-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-6" date="1519041600">- Add missing BR: gcc, make</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-1" date="1556625600">- Rebase to 2.3.1
  resolves: #1704253</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-2" date="1579003200">- Fix CVE-2020-6851
  resolves: #1790586</changelog>
</package>
<package pkgid="4da9038ddeb8d3ece4fa935e047d69820b9bc4160d58e4f5ba3273ca531d2913" name="openjpeg2-tools" arch="i686">
  <version epoch="0" ver="2.3.1" rel="2.el7_7"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-3" date="1504180800">- Backport more security fixes, including for CVE-2017-14041 and CVE-2017-14040</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-4" date="1504785600">- Backport fix for CVE-2017-14039</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-1" date="1507204800">- Update to 2.3.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-2" date="1514203200">- Use BUILD_STATIC_LIBS=OFF instead of deleting the static library after build</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-3" date="1514203201">- Rename tool names at cmake level to ensure OpenJPEGTargets.cmake refers to the renamed files</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.3.0-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-6" date="1519041600">- Add missing BR: gcc, make</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-1" date="1556625600">- Rebase to 2.3.1
  resolves: #1704253</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-2" date="1579003200">- Fix CVE-2020-6851
  resolves: #1790586</changelog>
</package>
<package pkgid="1b2b4cdb112cac31d9d5a1767bdb300dbf6cc7a77780e74199ced3d385bce5ff" name="openjpeg2-tools" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="2.el7_7"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-3" date="1504180800">- Backport more security fixes, including for CVE-2017-14041 and CVE-2017-14040</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.0-4" date="1504785600">- Backport fix for CVE-2017-14039</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-1" date="1507204800">- Update to 2.3.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-2" date="1514203200">- Use BUILD_STATIC_LIBS=OFF instead of deleting the static library after build</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-3" date="1514203201">- Rename tool names at cmake level to ensure OpenJPEGTargets.cmake refers to the renamed files</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.3.0-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.3.0-6" date="1519041600">- Add missing BR: gcc, make</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-1" date="1556625600">- Rebase to 2.3.1
  resolves: #1704253</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.3.1-2" date="1579003200">- Fix CVE-2020-6851
  resolves: #1790586</changelog>
</package>
<package pkgid="182df4a80bf2624c99b3381328746bb956854c6527536997980c04b8893ab659" name="openslp" arch="i686">
  <version epoch="1" ver="2.0.0" rel="8.el7_7"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1597725</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-8" date="1575979200">- Fix a heap-based buffer overflow vulnerability leading to
  remote code execution, CVE-2019-5544
  Resolves: #1781701</changelog>
</package>
<package pkgid="7d018612ffbdb54d399228c8565c50d290f4bade1fcc0f258136e5d6b5b59c84" name="openslp" arch="src">
  <version epoch="1" ver="2.0.0" rel="8.el7_7"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1597725</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-8" date="1575979200">- Fix a heap-based buffer overflow vulnerability leading to
  remote code execution, CVE-2019-5544
  Resolves: #1781701</changelog>
</package>
<package pkgid="ce40dfc66e128968f3e5f070536294e4f21a65c5e4704091694975e2f6ca0c92" name="openslp" arch="src">
  <version epoch="1" ver="2.0.0" rel="8.el7_7"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1597725</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-8" date="1575979200">- Fix a heap-based buffer overflow vulnerability leading to
  remote code execution, CVE-2019-5544
  Resolves: #1781701</changelog>
</package>
<package pkgid="abf5d229ec66f41f938de5f8696f563daa2036934ad07cdd77ce305461c0f3fa" name="openslp" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="8.el7_7"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1597725</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-8" date="1575979200">- Fix a heap-based buffer overflow vulnerability leading to
  remote code execution, CVE-2019-5544
  Resolves: #1781701</changelog>
</package>
<package pkgid="c07ed739e6e4a1c96a9fe762e449f0b37245974f2eba753320ff807b9f7ed853" name="openslp-debuginfo" arch="i686">
  <version epoch="1" ver="2.0.0" rel="8.el7_7"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1597725</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-8" date="1575979200">- Fix a heap-based buffer overflow vulnerability leading to
  remote code execution, CVE-2019-5544
  Resolves: #1781701</changelog>
</package>
<package pkgid="b040366534b3d43c268799ca1031bb375f3baa45d1de6f3c94c183e5cbc506f0" name="openslp-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="8.el7_7"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1597725</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-8" date="1575979200">- Fix a heap-based buffer overflow vulnerability leading to
  remote code execution, CVE-2019-5544
  Resolves: #1781701</changelog>
</package>
<package pkgid="c644a5a35fad483e0a5bd3c800ee1dc7e5680439db11d6a22db4981993ed5482" name="openslp-devel" arch="i686">
  <version epoch="1" ver="2.0.0" rel="8.el7_7"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1597725</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-8" date="1575979200">- Fix a heap-based buffer overflow vulnerability leading to
  remote code execution, CVE-2019-5544
  Resolves: #1781701</changelog>
</package>
<package pkgid="48fd83e18f01cc61402b3d75f3f7a0e0f88553cea8b9ce68247b64632ed72351" name="openslp-devel" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="8.el7_7"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1597725</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-8" date="1575979200">- Fix a heap-based buffer overflow vulnerability leading to
  remote code execution, CVE-2019-5544
  Resolves: #1781701</changelog>
</package>
<package pkgid="6490762a858bd7f7dad7fedd266088c23596eab629975bfa174bb2b05cc16f28" name="openslp-server" arch="i686">
  <version epoch="1" ver="2.0.0" rel="8.el7_7"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1597725</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-8" date="1575979200">- Fix a heap-based buffer overflow vulnerability leading to
  remote code execution, CVE-2019-5544
  Resolves: #1781701</changelog>
</package>
<package pkgid="c54a32414495d39c9df05cb3a8f4e054848c683cbddedab6f7a470fb2b7d7c96" name="openslp-server" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="8.el7_7"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1597725</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-8" date="1575979200">- Fix a heap-based buffer overflow vulnerability leading to
  remote code execution, CVE-2019-5544
  Resolves: #1781701</changelog>
</package>
<package pkgid="54e4dd879e0378fe7527a86cae9a361027971d23d41e369919a0a49e24d74e58" name="pacemaker" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="577d03940d380fb9329cc53aa7a32b6aade73140f2d00c425f6b7497c8e9f580" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="44a5955f0cc0173cf05a381d783c43182eb04aa9097c958c09e5d3102eef5634" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="c5422e508cc84186199665b22c8da97dfa6e062544a71ac0167f4c387a8a4e67" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="c8cba4c7ca0fa41b2eea94465dc5cb7f32d856bf479077565a46022eb9e864f5" name="pacemaker" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="9c6e8a483acdea64861a8904590cb971bb786c9386d103e7173bfd025e1153ed" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="33665e10185312d09c72c10faed19846aede0e76289299b43ce093d59c275ddd" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="ce421ef0db19568a12f20dc73402c727760d9d6cb10a830d95c2e9b57b8758cd" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="ea8d381e8145e858ba5a352a34f6afcdd3484ad3441ca5b4015a9bc564aa1e48" name="pacemaker-cli" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="1d402d290dba5747b991b4abd3513a61b436551cac4ef60b1a546d84210ff0f7" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="10f7e78454e4581342cfeb659e62793b9e79f9d2e0325b1bb81e5c51527f1b25" name="pacemaker-cli" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="2944bebe1e2d1810516fb35f043e201fd2e7765bce8de1544c03f4a522baeb54" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="55d784eb345c59940a243bbe9530d18a66d83327372edc3570b951e55a8488a3" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="ac8f0551c76ac0d3f7df2e3a5f42edef66717332a5fcc400416fa538d3cf0174" name="pacemaker-cluster-libs" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="d5df5d2e1ae5ff8aa13b96f523fdf53a255cd2f7fae9ebba5dc3b3f49e7dae5c" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="e18f69803a45156d0c8d4f6e304c0b6341b1632c295932cbf3adb32a21a2eaf8" name="pacemaker-cluster-libs" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="f5398eb80b7e574b65b8fd6e19c63026c0b71cfe058467d79c6fc47b48d62ab5" name="pacemaker-cts" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="ab9d0626521363feeb3ef8aaf7b718cb2748742b86a60edfa444feb8feef3e67" name="pacemaker-cts" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="4be9755cde25a300466885429ca930fec7847c9ff8574ae47808d42c22b56873" name="pacemaker-cts" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="2061e7d494261b72deab19ef8ad0f3639ec69ec72a6813aa09a293698c498dd5" name="pacemaker-cts" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="a3676070c7e94fbb4b99e1eeb218a2cc45593c650b217cef3024942cec97cf80" name="pacemaker-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="2be3c94ab4760dcade5c607e365b49fd5d91f031baa900f6363a35d030ca7aed" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="efbf05da23c1c06debbb5cbcf0fa7dff1832b9fb0fb5eb96561e97185bab9101" name="pacemaker-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="cb71180cf8af8b0dbf1cba73bf4643806b84e9954f0c92c98347f58a48fa2902" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="c614a0d32fb97e3265e0a1e0c68837198803f673bd9e8dc3c05ef56c81c3edf4" name="pacemaker-doc" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="22e9a5117ae66a38900cc24ebcc648e916e6cd0e4433b63d20299b7be9aa2a89" name="pacemaker-doc" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="4a4458ad28f864b84613eb22be248b7bd22ee0b6a188ea97e0577094bbe0b1f3" name="pacemaker-doc" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="7a5829a99a3808f39cf1989600c06e589892bfae3f0f0b0d8269eb38df2a228c" name="pacemaker-doc" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="9eb3b65f42b4ecfde3d1a233e4dffb636b51865ec7379e34ff6c7bac94f21f61" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="badf5679020e5da1114d107053b03fdfa135c80fffd1a70261a966ba709c8390" name="pacemaker-libs" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="eec023b47fd7c0f2f66ba9a6ac4cdda7f833c6c37906b99c5b1fc02a1e962abd" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="8b6bcb431531fdda0c7e521130511ce0c7ac8f9cf9dd7958757c5df56eb75648" name="pacemaker-libs" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="053fbea192dd97543296bd48d762f71af66edee88ffc14da842a5027e24b0793" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="8beca23132b974a32d1c55b29fb09c41bc07691ce82149383105b0a0f5f9d584" name="pacemaker-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="5ca43d7852d26499d4f186c78798b18e33b91085b53ecc2939a2d14620117edc" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="7311f171c5db081bd9cf6894e59df0ce509b5532dfd3ca63485edee9edd67ffe" name="pacemaker-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="77e707df11646da83816cf80be5ded7eac24f573a0726d62967ec3b989da18f9" name="pacemaker-nagios-plugins-metadata" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="c7ddad1f86fc00be683b34192f2f0f049338c85d4e216ef9476be53e1db8f828" name="pacemaker-nagios-plugins-metadata" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="e3007dd1f7e42c91c62718033be7be0b34ec2754154acc605c709b48bccf94cf" name="pacemaker-nagios-plugins-metadata" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="2eb937d40f54ec3e8b784e8723f291e2afe623778d088f3c3b9f34918fef209c" name="pacemaker-nagios-plugins-metadata" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="a350b7a2abd092b8d8418393d205b92e076af503c2d14fa4f128f58ce0e69fda" name="pacemaker-remote" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="a54fa2b6a5b4ea2fc97075628decfb79d336f36a899f1d8ce6d709217f591339" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
</package>
<package pkgid="a21a053ec78f61f64a3319edda965b5ca82363be39ca54ccc6a159e2b267fca5" name="pacemaker-remote" arch="i686">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="667fef08275c15bf6b52e471fe3988a97a07c69fa54be9272885aea0bff4402d" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.20" rel="5.el7_7.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-1" date="1549022400">- pcs status now shows when a standby node still has active resources
- Allow clean-up of guest nodes and bundles without unmanaging first
- pcs status now shows pending and failed fence actions by default
- Improve pcs status display when disconnected from cluster
- Ensure node attributes are recorded if attrd writer is shutting down
- Synchronize fencing history across all nodes
- Add stonith_admin option to clear fencing history
- Don't schedule unneeded bundle actions when connection is on different node
- Allow use of sbd in clusters with guest nodes and bundles
- Schedule bundle clone notifications correctly when connection is moving
- Rebase on upstream 1.1.20-rc1 version
- Avoid unneeded resource restarts when remote connection fails to start
- Allow crm_resource --move to work when a previous move had a lifetime
- Wait for all replies when refreshing a resource
- Don't schedule clone notifications for a stopped bundle
- Allow option to crm_resource --clear to clear only expired constraints
- Fix result reporting when cleanup is done while an operation is in-flight
- Resolves: rhbz#1419548
- Resolves: rhbz#1448467
- Resolves: rhbz#1461964
- Resolves: rhbz#1486869
- Resolves: rhbz#1535221
- Resolves: rhbz#1555938
- Resolves: rhbz#1595422
- Resolves: rhbz#1627948
- Resolves: rhbz#1638593
- Resolves: rhbz#1644076
- Resolves: rhbz#1644864
- Resolves: rhbz#1648507
- Resolves: rhbz#1648620
- Resolves: rhbz#1652053
- Resolves: rhbz#1652752
- Resolves: rhbz#1658650
- Resolves: rhbz#1665343</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-2" date="1553169600">- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.1" date="1563883200">- Handle losing remote node while it is shutting down
- Allow configurable GnuTLS cipher priorities and use stricter default
- Resolves: rhbz#1732335
- Resolves: rhbz#1733187</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5.2" date="1573473600">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1770734</changelog>
</package>
<package pkgid="845b8c98ada5f06b106c44cc1efaffc2d4273d8d4d687241c9c050470ca306db" name="pango" arch="i686">
  <version epoch="0" ver="1.42.4" rel="4.el7_7"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.36.8-2" date="1431604800">- Regenerate man page for pango-view
- Related: #1174436</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.3-1" date="1473768000">- Update to 1.40.3
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.4-1" date="1488196800">- Update to 1.40.4
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.1-1" date="1523188800">- Update to 1.42.1
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.1-2" date="1528200000">- Provide empty pango-querymodules link to /usr/bin/true
- Resolves: #1443937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.3-1" date="1532952000">- Update to 1.42.3
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-1" date="1535630400">- Update to 1.42.4
- Security fix for CVE-2018-15120
- Resolves: #1624192</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-2" date="1545134400">- Requires glib2 2.56.1
- Resolves: #1655751</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-3" date="1549800000">- Fixes crash in pango_fc_font_key_get_variations when key is null
- Resolves: #1667239</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-4" date="1566475200">- Fixes bidi crash
- Security fix for CVE-2019-1010238
- Resolves: #1738459</changelog>
</package>
<package pkgid="e8a7831ed9e9ca70715d9fa55d658e160c6060c0dad44eabd00ae2ddde844d4f" name="pango" arch="src">
  <version epoch="0" ver="1.42.4" rel="4.el7_7"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.36.8-2" date="1431604800">- Regenerate man page for pango-view
- Related: #1174436</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.3-1" date="1473768000">- Update to 1.40.3
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.4-1" date="1488196800">- Update to 1.40.4
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.1-1" date="1523188800">- Update to 1.42.1
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.1-2" date="1528200000">- Provide empty pango-querymodules link to /usr/bin/true
- Resolves: #1443937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.3-1" date="1532952000">- Update to 1.42.3
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-1" date="1535630400">- Update to 1.42.4
- Security fix for CVE-2018-15120
- Resolves: #1624192</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-2" date="1545134400">- Requires glib2 2.56.1
- Resolves: #1655751</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-3" date="1549800000">- Fixes crash in pango_fc_font_key_get_variations when key is null
- Resolves: #1667239</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-4" date="1566475200">- Fixes bidi crash
- Security fix for CVE-2019-1010238
- Resolves: #1738459</changelog>
</package>
<package pkgid="23998efa0606d0f5cd573198a77633ad08c3ede6799dad931dd89a80032cdbcd" name="pango" arch="src">
  <version epoch="0" ver="1.42.4" rel="4.el7_7"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.36.8-2" date="1431604800">- Regenerate man page for pango-view
- Related: #1174436</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.3-1" date="1473768000">- Update to 1.40.3
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.4-1" date="1488196800">- Update to 1.40.4
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.1-1" date="1523188800">- Update to 1.42.1
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.1-2" date="1528200000">- Provide empty pango-querymodules link to /usr/bin/true
- Resolves: #1443937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.3-1" date="1532952000">- Update to 1.42.3
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-1" date="1535630400">- Update to 1.42.4
- Security fix for CVE-2018-15120
- Resolves: #1624192</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-2" date="1545134400">- Requires glib2 2.56.1
- Resolves: #1655751</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-3" date="1549800000">- Fixes crash in pango_fc_font_key_get_variations when key is null
- Resolves: #1667239</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-4" date="1566475200">- Fixes bidi crash
- Security fix for CVE-2019-1010238
- Resolves: #1738459</changelog>
</package>
<package pkgid="95d7d43e3b9281741251866722daa3dba7f4a046855fe422fe65d2ce1ccf1269" name="pango" arch="x86_64">
  <version epoch="0" ver="1.42.4" rel="4.el7_7"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.36.8-2" date="1431604800">- Regenerate man page for pango-view
- Related: #1174436</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.3-1" date="1473768000">- Update to 1.40.3
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.4-1" date="1488196800">- Update to 1.40.4
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.1-1" date="1523188800">- Update to 1.42.1
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.1-2" date="1528200000">- Provide empty pango-querymodules link to /usr/bin/true
- Resolves: #1443937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.3-1" date="1532952000">- Update to 1.42.3
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-1" date="1535630400">- Update to 1.42.4
- Security fix for CVE-2018-15120
- Resolves: #1624192</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-2" date="1545134400">- Requires glib2 2.56.1
- Resolves: #1655751</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-3" date="1549800000">- Fixes crash in pango_fc_font_key_get_variations when key is null
- Resolves: #1667239</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-4" date="1566475200">- Fixes bidi crash
- Security fix for CVE-2019-1010238
- Resolves: #1738459</changelog>
</package>
<package pkgid="fb99dcd047b583374052a9082940a8d962e1046d09e085b3819b095c6804aa14" name="pango-debuginfo" arch="i686">
  <version epoch="0" ver="1.42.4" rel="4.el7_7"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.36.8-2" date="1431604800">- Regenerate man page for pango-view
- Related: #1174436</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.3-1" date="1473768000">- Update to 1.40.3
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.4-1" date="1488196800">- Update to 1.40.4
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.1-1" date="1523188800">- Update to 1.42.1
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.1-2" date="1528200000">- Provide empty pango-querymodules link to /usr/bin/true
- Resolves: #1443937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.3-1" date="1532952000">- Update to 1.42.3
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-1" date="1535630400">- Update to 1.42.4
- Security fix for CVE-2018-15120
- Resolves: #1624192</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-2" date="1545134400">- Requires glib2 2.56.1
- Resolves: #1655751</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-3" date="1549800000">- Fixes crash in pango_fc_font_key_get_variations when key is null
- Resolves: #1667239</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-4" date="1566475200">- Fixes bidi crash
- Security fix for CVE-2019-1010238
- Resolves: #1738459</changelog>
</package>
<package pkgid="6276de2f857b1f5fb8b04b9679205e02f44567609a090e0999bba9938e9e60f9" name="pango-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.42.4" rel="4.el7_7"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.36.8-2" date="1431604800">- Regenerate man page for pango-view
- Related: #1174436</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.3-1" date="1473768000">- Update to 1.40.3
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.4-1" date="1488196800">- Update to 1.40.4
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.1-1" date="1523188800">- Update to 1.42.1
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.1-2" date="1528200000">- Provide empty pango-querymodules link to /usr/bin/true
- Resolves: #1443937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.3-1" date="1532952000">- Update to 1.42.3
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-1" date="1535630400">- Update to 1.42.4
- Security fix for CVE-2018-15120
- Resolves: #1624192</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-2" date="1545134400">- Requires glib2 2.56.1
- Resolves: #1655751</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-3" date="1549800000">- Fixes crash in pango_fc_font_key_get_variations when key is null
- Resolves: #1667239</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-4" date="1566475200">- Fixes bidi crash
- Security fix for CVE-2019-1010238
- Resolves: #1738459</changelog>
</package>
<package pkgid="fde6a386658ec4d2c8d755426542412e7a528857f6eeadf9bacf607af690b270" name="pango-devel" arch="i686">
  <version epoch="0" ver="1.42.4" rel="4.el7_7"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.36.8-2" date="1431604800">- Regenerate man page for pango-view
- Related: #1174436</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.3-1" date="1473768000">- Update to 1.40.3
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.4-1" date="1488196800">- Update to 1.40.4
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.1-1" date="1523188800">- Update to 1.42.1
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.1-2" date="1528200000">- Provide empty pango-querymodules link to /usr/bin/true
- Resolves: #1443937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.3-1" date="1532952000">- Update to 1.42.3
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-1" date="1535630400">- Update to 1.42.4
- Security fix for CVE-2018-15120
- Resolves: #1624192</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-2" date="1545134400">- Requires glib2 2.56.1
- Resolves: #1655751</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-3" date="1549800000">- Fixes crash in pango_fc_font_key_get_variations when key is null
- Resolves: #1667239</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-4" date="1566475200">- Fixes bidi crash
- Security fix for CVE-2019-1010238
- Resolves: #1738459</changelog>
</package>
<package pkgid="ab055cae28e60b68ec1bdbf11cd747eff1964afabe21a0b2ecbeb6f304e63786" name="pango-devel" arch="x86_64">
  <version epoch="0" ver="1.42.4" rel="4.el7_7"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.36.8-2" date="1431604800">- Regenerate man page for pango-view
- Related: #1174436</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.3-1" date="1473768000">- Update to 1.40.3
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.4-1" date="1488196800">- Update to 1.40.4
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.1-1" date="1523188800">- Update to 1.42.1
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.1-2" date="1528200000">- Provide empty pango-querymodules link to /usr/bin/true
- Resolves: #1443937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.3-1" date="1532952000">- Update to 1.42.3
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-1" date="1535630400">- Update to 1.42.4
- Security fix for CVE-2018-15120
- Resolves: #1624192</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-2" date="1545134400">- Requires glib2 2.56.1
- Resolves: #1655751</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-3" date="1549800000">- Fixes crash in pango_fc_font_key_get_variations when key is null
- Resolves: #1667239</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-4" date="1566475200">- Fixes bidi crash
- Security fix for CVE-2019-1010238
- Resolves: #1738459</changelog>
</package>
<package pkgid="557ee7c0d1a406f57986f7a45a4766a35c80623d416e1e535fdc0e179ba39928" name="pango-tests" arch="i686">
  <version epoch="0" ver="1.42.4" rel="4.el7_7"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.36.8-2" date="1431604800">- Regenerate man page for pango-view
- Related: #1174436</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.3-1" date="1473768000">- Update to 1.40.3
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.4-1" date="1488196800">- Update to 1.40.4
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.1-1" date="1523188800">- Update to 1.42.1
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.1-2" date="1528200000">- Provide empty pango-querymodules link to /usr/bin/true
- Resolves: #1443937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.3-1" date="1532952000">- Update to 1.42.3
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-1" date="1535630400">- Update to 1.42.4
- Security fix for CVE-2018-15120
- Resolves: #1624192</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-2" date="1545134400">- Requires glib2 2.56.1
- Resolves: #1655751</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-3" date="1549800000">- Fixes crash in pango_fc_font_key_get_variations when key is null
- Resolves: #1667239</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-4" date="1566475200">- Fixes bidi crash
- Security fix for CVE-2019-1010238
- Resolves: #1738459</changelog>
</package>
<package pkgid="2551244e70fdda4633081bd33695320434dd09698028be44a9256b5e152a50d2" name="pango-tests" arch="x86_64">
  <version epoch="0" ver="1.42.4" rel="4.el7_7"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.36.8-2" date="1431604800">- Regenerate man page for pango-view
- Related: #1174436</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.3-1" date="1473768000">- Update to 1.40.3
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.4-1" date="1488196800">- Update to 1.40.4
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.1-1" date="1523188800">- Update to 1.42.1
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.1-2" date="1528200000">- Provide empty pango-querymodules link to /usr/bin/true
- Resolves: #1443937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.3-1" date="1532952000">- Update to 1.42.3
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-1" date="1535630400">- Update to 1.42.4
- Security fix for CVE-2018-15120
- Resolves: #1624192</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-2" date="1545134400">- Requires glib2 2.56.1
- Resolves: #1655751</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-3" date="1549800000">- Fixes crash in pango_fc_font_key_get_variations when key is null
- Resolves: #1667239</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-4" date="1566475200">- Fixes bidi crash
- Security fix for CVE-2019-1010238
- Resolves: #1738459</changelog>
</package>
<package pkgid="ffbc2aca75d04de3f841727b32c9eac363192d6622683116737efdaf5b46db8d" name="patch" arch="i686">
  <version epoch="0" ver="2.7.1" rel="12.el7_7"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-11" date="1542888000">- Fixed CVE-2016-10713 - Out-of-bounds access in pch_write_line function 
- Fixed CVE-2018-6952 - Double free of memory
- Resolves: #1626473, honor new file mode 100755 when applying patches
- Resolves: #1653294, Added virtual provides for bundled gnulib library</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-12" date="1567425600">- Fixed CVE-2018-20969, invoke ed directly instead of using the shell</changelog>
</package>
<package pkgid="f3bacaa7085ac35b1617f6538cad6e179c8880fa1a674bbeb73ee6984460963f" name="patch" arch="src">
  <version epoch="0" ver="2.7.1" rel="12.el7_7"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-11" date="1542888000">- Fixed CVE-2016-10713 - Out-of-bounds access in pch_write_line function 
- Fixed CVE-2018-6952 - Double free of memory
- Resolves: #1626473, honor new file mode 100755 when applying patches
- Resolves: #1653294, Added virtual provides for bundled gnulib library</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-12" date="1567425600">- Fixed CVE-2018-20969, invoke ed directly instead of using the shell</changelog>
</package>
<package pkgid="4daf700f4eccf66097fab19ce640012d3694e8e1cdf3dcb82e0b8cf039e9dd47" name="patch" arch="src">
  <version epoch="0" ver="2.7.1" rel="12.el7_7"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-11" date="1542888000">- Fixed CVE-2016-10713 - Out-of-bounds access in pch_write_line function 
- Fixed CVE-2018-6952 - Double free of memory
- Resolves: #1626473, honor new file mode 100755 when applying patches
- Resolves: #1653294, Added virtual provides for bundled gnulib library</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-12" date="1567425600">- Fixed CVE-2018-20969, invoke ed directly instead of using the shell</changelog>
</package>
<package pkgid="498c8ab9dc68cf08b4bd2551e1686da039b51a576fa1d72b3fa2a2059fa1e5fe" name="patch" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="12.el7_7"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-11" date="1542888000">- Fixed CVE-2016-10713 - Out-of-bounds access in pch_write_line function 
- Fixed CVE-2018-6952 - Double free of memory
- Resolves: #1626473, honor new file mode 100755 when applying patches
- Resolves: #1653294, Added virtual provides for bundled gnulib library</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-12" date="1567425600">- Fixed CVE-2018-20969, invoke ed directly instead of using the shell</changelog>
</package>
<package pkgid="0b642d0a74b05d3424c3136972ea6f368e0fd176dba12417b1ab6b438a24f436" name="patch-debuginfo" arch="i686">
  <version epoch="0" ver="2.7.1" rel="12.el7_7"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-11" date="1542888000">- Fixed CVE-2016-10713 - Out-of-bounds access in pch_write_line function 
- Fixed CVE-2018-6952 - Double free of memory
- Resolves: #1626473, honor new file mode 100755 when applying patches
- Resolves: #1653294, Added virtual provides for bundled gnulib library</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-12" date="1567425600">- Fixed CVE-2018-20969, invoke ed directly instead of using the shell</changelog>
</package>
<package pkgid="2ece6873ef2059e9274010b5fcb45ea4f3c619c8883f0403af675a9dd3e04e39" name="patch-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="12.el7_7"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-11" date="1542888000">- Fixed CVE-2016-10713 - Out-of-bounds access in pch_write_line function 
- Fixed CVE-2018-6952 - Double free of memory
- Resolves: #1626473, honor new file mode 100755 when applying patches
- Resolves: #1653294, Added virtual provides for bundled gnulib library</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-12" date="1567425600">- Fixed CVE-2018-20969, invoke ed directly instead of using the shell</changelog>
</package>
<package pkgid="ef24b4a62b4c78e69cdda958d31c7caa6e46ccda9df21c9df1ce6fc85787d627" name="pcp" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="38ee42044d9e0e8e6b110c17d5a3e1bceba62eebcfde22ad91f33a7fd187cd99" name="pcp" arch="src">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="0b81c31ca48559ef5528fdca92fbda89462c5eaa170ff74164f17e016c0084bd" name="pcp" arch="src">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="a08ac62c8d461a1bc2ce154aea71f2de4fbcb64e955823ed837cf8b2f0b4da0a" name="pcp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="ec59cc9c7f46539fc80a732381c54b2500bc3de6e94fad216552921420b19114" name="pcp-conf" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="5ffe6c6fb4092e8167236ee89d6a7a47c6a52ff82a9ef0ee727dcccc2e57808c" name="pcp-conf" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="9c543ca5e303ceeab5320b0be0a7e7719dbdad96deab989452539456b07d6efb" name="pcp-debuginfo" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="30c7b81e01e166a3d676bcfe7b9b1655adb3f0b15e661bf26d210d499aeeedb5" name="pcp-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="13b383d735fa927b0cf4920245f3ce349d049b3680ff904d34b0d51c30cdd835" name="pcp-devel" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="45bc96d5ed7036ceb4c714c7716c7572d9e958f95d22dae58b0d1c13aaaab05f" name="pcp-devel" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="cbf6e9a3ca9fe587b3dc2c234b886028d94e17466a147738f6e612bc52c41aae" name="pcp-doc" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="d44817f980e3310266fd20af72037041d328f92f0facf541001e0995974a7026" name="pcp-doc" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="2abdfd2d7394185cfe08ade98b20ca79923496245f8b441ba148cc8f4e0b4498" name="pcp-export-pcp2elasticsearch" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="31dcfe7c8d9b5597f3eb985766ca5e8a485f8c0314f657b855d424f3d9012ad4" name="pcp-export-pcp2elasticsearch" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="945089b8869e32b173a0970cd762a27a9d1af82d11d78c928929b96fb55ae31a" name="pcp-export-pcp2graphite" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="798f25d7c5e6890f2b48b4dacccc9c81e06976d1cc260e84603ba5c060c5a1c0" name="pcp-export-pcp2graphite" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="e07ab659a8c262b657bfc5bebf7be87e620f3aab8e4bac2551d03170da652a6d" name="pcp-export-pcp2influxdb" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="c0441330a36f138ca38d3ec16185cdfaf8b1ed309d676aa392b9e4282596a666" name="pcp-export-pcp2influxdb" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="c5081933fb3fc86151190d3fdbb8499b7924f025d88cda4022c334fd4ac1db68" name="pcp-export-pcp2json" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="ded23c7c29ae6435c99cb927f683bf656ce0c8a14a9b3d6fea70bc81f4ee4d1b" name="pcp-export-pcp2json" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="e16a196e697b0bb585e89881a7f770725ac6e4b48f0f5539a32fd928245fc650" name="pcp-export-pcp2spark" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="7c5918c74e77c16b3256ecb188d2fce0c81deda94accc7a4165ddff9c7b479f0" name="pcp-export-pcp2spark" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="c5cfd35aa44b7490ef81db25511967bf9feee15bcd0bdee6f0d99b7529fde010" name="pcp-export-pcp2xml" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="7c220e936730c35e29df2df70800e7122a6db7d61e475d4f147dc2f654259f71" name="pcp-export-pcp2xml" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="5d05fe6f4e896e2fda1351f2c11792b6d9a527c34853aa5566974b928b64a770" name="pcp-export-pcp2zabbix" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="9142d634d5a51b83c7b82c6783f5783abfe55360fc9a8172f550d7367d256711" name="pcp-export-pcp2zabbix" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="a198ddedddcd7128fce45345bc82f58a02f0c9320e1ac3b1467ed5c3afd3aef3" name="pcp-export-zabbix-agent" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="bf0b74f8a82551109916eba818fb39b27ebe6f5fe537f316509e01aaf46be622" name="pcp-export-zabbix-agent" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="4a031e17b1cf4276e75eebb556e354a0e38734965cba22597599e79bae3300e4" name="pcp-gui" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="fbfca4d137285e276d71e8bfc27f319517874a53b59d1ca9d67425a2ff4db729" name="pcp-gui" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="7bc5b8d86138352d2232a79ee3254de8a741e78786a1c5e8fafd139df669c74f" name="pcp-import-collectl2pcp" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="aa52b2094458f67ae6f609f9d2af77c9932abd00cb4155832997a47ee369c462" name="pcp-import-collectl2pcp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="3f9702bfe07ff49226f9727b937608988c0c392df6c00846d33ac6a46bc821e8" name="pcp-import-ganglia2pcp" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="bcae7c2d7fbf5b031a8b6532306ce6f791870c661a46322ed2b9e3f61b07a6a6" name="pcp-import-ganglia2pcp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="ca72d043c587962a6d58953a9056a43adb154fdbaa2f5241f993066b8464c35d" name="pcp-import-iostat2pcp" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="be085cbe892ae077966325f002a5582ff74710a0d10880da9791f5060881853b" name="pcp-import-iostat2pcp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="c0c7e6a4892a3a2b3f2f31a7e06f80f8a9d4ac6f2e783ad92d48e916e063c3a5" name="pcp-import-mrtg2pcp" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="321596a863f642bda18959fa1411c01bdebb20c03a8f3e636a99a63fe60fc53d" name="pcp-import-mrtg2pcp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="3ab523350bd4d58856fac495747c081f3a0a85e7c3d2a805e1a68cd33ff30a3e" name="pcp-import-sar2pcp" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="f4359bec63228d4ad50f1b554f542e7cb43eaa46e1dc818809569f082258f60a" name="pcp-import-sar2pcp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="46141a2722a56b4f465f83646292e7167742f0b0c12b0c4d29c3c5032202e393" name="pcp-libs" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="ec6c362627bc8de95a602a139b652d766ebf86fd464773fd7860d718f2416572" name="pcp-libs" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="503ad91bd8f01632a9f1ae7205d0d5f30546a8b3e8eb9aff326aabd73048949e" name="pcp-libs-devel" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="afdaaab9ab12a4291874c0891e22230202e91315e9993c73a9f123488ed80dba" name="pcp-libs-devel" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="5f8ea4678beb1acc0f156b596c83a6b395d993b2321f630343336f916903eff1" name="pcp-manager" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="c7ce3393fb2cca5beb9417f5dc315a2be175e9d87a2f48b2fc26645e50fff6cf" name="pcp-manager" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="c48fcb3e48783c55d7af3713410447fa8ae1968d5461dddb7b36897d194bc8fe" name="pcp-pmda-activemq" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="fa460818137f44a4d990819f83cea277e047bee24a862ed8479863f26011244e" name="pcp-pmda-activemq" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="89d1f03f3cd2b19ecb8381dcb6ec6481d3950806698498123bad67e715263a85" name="pcp-pmda-apache" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="89b47fa64ec2f9d1e3ba55141c5e087e4c81845532300a02f246a707158fbee2" name="pcp-pmda-apache" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="ad6a31a918a556ed5782e6c8b3580aa847cd1c56589d5e2966266b1354a6ee19" name="pcp-pmda-bash" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="d41d8a7d6c7d76ade37eb1699f77b4aafebedebb01b75f6d3d23a0a03e004a16" name="pcp-pmda-bash" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="60bca450829123b2347056b77a57f65a18ce30cb1fff6d73eb3176a12d0afa55" name="pcp-pmda-bcc" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="3976e9ada651a8274c501d58fa82faa22fa0c3000ebd3921a0bf76e59ab7c3b6" name="pcp-pmda-bind2" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="272542a99385a251aedfa57ef88f8de204ea5a414aa03c34ba34e4fc89083180" name="pcp-pmda-bind2" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="52c88f65f3187e651f354ed38d4671fb9181770fb0afbaeea6ca1c230bf3c8bb" name="pcp-pmda-bonding" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="1b1edf5ae2a178574c1acf2489047c9a5113c389dd87e9e5b1da003ee942b1c2" name="pcp-pmda-bonding" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="1a54941f5f458146fa9e2ade787f1adb0dee82fdc2cfc965e04809b24f16b6a2" name="pcp-pmda-cifs" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="15b1fdd31d59ae4600b600b86f83cc4a4ebfcff13c3b538ea5ab41b9b6c9c79a" name="pcp-pmda-cifs" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="2fb472461fbd96a09262c0e812054c2882d508ad7f297f36ed38acb2fa8589c8" name="pcp-pmda-cisco" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="3d403bc4b1c27705fbb3e251007957454f020cdb0ab63345b0910b0a66f4e66e" name="pcp-pmda-cisco" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="f33f4a73939eb83786d46bf448865983d23a3dd69df2f2c27e4705511977bcfe" name="pcp-pmda-dbping" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="efdccadb62a5ff19f9cfe99e917b0c1e126b406d95b1bc74c24446e39e218172" name="pcp-pmda-dbping" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="86dbe5771f452383162b3080a6f8345723053bada475b6b28051889253dc81dc" name="pcp-pmda-dm" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="5253e498ed4431e3b622d2b70d082ba264a8798ea1e3c02e89940887cc9df4a6" name="pcp-pmda-dm" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="72323db53e52927bda89e518eeddf65cf8935f7ecf3bd651f7a3d7a4e1094776" name="pcp-pmda-docker" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="aea6717b4a5d8b2c7f3be889920e8075c14d023622d97c28dc0038c7c1aa253b" name="pcp-pmda-docker" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="0845a9db4de53b9c0b7e713e6dc9a7c16bcbcd11de0ff569564970d3feeee130" name="pcp-pmda-ds389" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="7033d2d08749c760ca17843349e3454d7c58a59c3d0e2c7b8f31dd317fc5ad55" name="pcp-pmda-ds389" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="247157faabbaed5daa49c5c275d2e7cdd6eb4edc2866cb0f56da2590801d0f7e" name="pcp-pmda-ds389log" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="fb49abaa4aad75e2a8832b7eb1c284929e921bf3863e2981a3f17f0d58cc742e" name="pcp-pmda-ds389log" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="e47c9bb01ac42ede7e1d5875296103a0b47852d1c7a2211b3cb56d23db528996" name="pcp-pmda-elasticsearch" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="c8ce64047d5ed29abe6b5e8ea977b7f37be33c8dd4a8de5698b4141854cf784c" name="pcp-pmda-elasticsearch" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="ea49b2ff4965194313bbb98c220aa121e04f49d6c42ee87c71b19a6f3ead97ec" name="pcp-pmda-gfs2" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="baa3c9b953c8a9ab41833e86e1228b42e5c86513125a4b5bd1d0ca828e355f50" name="pcp-pmda-gfs2" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="b7b7bae97d84ff4b13b1b8ed44b74c8819b09f4c6ee91d38eff6ad7d5350b976" name="pcp-pmda-gluster" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="749c16d6e490de9b891ddefb6c35784a1b8e0fabfeeee35a3a25b67027ebdb7f" name="pcp-pmda-gluster" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="a08f2eede4d299ea9f0ad820720dc5e618206aa1b11b34fb81992343a855d2fd" name="pcp-pmda-gpfs" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="dd51ea7a560f72a2acf799203cfba1191b3d75211034a0de07de5769b8abd9c7" name="pcp-pmda-gpfs" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="eceeb62b6d0a44e687d109ef314737b5a7519f796543e3d883b41cc41848e177" name="pcp-pmda-gpsd" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="41363ed39353eb182445f26cffc89d33b7b93c794a13cb7ebc8357e813d477bc" name="pcp-pmda-gpsd" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="beabdde5a6d35cacaea0c7fc692992f062c3942cc8ec2a768fb690d2b57c89ee" name="pcp-pmda-haproxy" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="1d2ad638f3a49d37c3b1bab5d902144e228ae35cbf20fc8c2d219d16ae991411" name="pcp-pmda-haproxy" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="ff0a70f36321f540db743f294a02d78b75dca7fbacc25082ceb3adf9b7312669" name="pcp-pmda-infiniband" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="e7006e5358c02ccafcb1b78d04a8ea58c0dc2b5d82d8c2cf25999b855f249f79" name="pcp-pmda-infiniband" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="523b93c004da51d8e9935ea25a625a0930b6487d3896d92ecb239c4ba1d17699" name="pcp-pmda-json" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="6040b72759ebd28a523dc7439fb09466de74abb2c954f73185dc1ccf8c826085" name="pcp-pmda-json" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="f464b8bc95648b47c52e3b6e3ad08c0b06d7bac16901929bcfc835c8a36df7bd" name="pcp-pmda-libvirt" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="7acd0a504459afe283073945ce539e6f9353f7879f7c3510d5629b708b87fb0e" name="pcp-pmda-libvirt" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="04936e0da726b4e71363a2083af5fa98ac91e5a9522f3906da603800aa63814d" name="pcp-pmda-lio" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="2e10f3ccb7c5a2a25b85f0434255037c26ec6f5003c8fb4b47a04336b8123762" name="pcp-pmda-lio" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="32d3e8c6fa1063e76f2130ee8b8a852da5a82ee0f42782dbc4d1906f02c09468" name="pcp-pmda-lmsensors" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="124dc2f6e39d9df2cedfea2404555d94fb5be7a4ea5167165a6e49e361b15a08" name="pcp-pmda-lmsensors" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="dbc1e388f30e1ff0c92596c22d017492cdcacb3ba98329f6f397a7d9571bd09e" name="pcp-pmda-logger" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="ddbf77211fb20a4191cf4ffe1029482ed4848b643ae8ea4a6ad0b367d7ec22e3" name="pcp-pmda-logger" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="b9aa14ca1345c8dcedc5b832a9fda5adbb6b43112a0fe04c5108b3c8035a49fe" name="pcp-pmda-lustre" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="24cc185b4a11d409e1d4cf2a4d2d46403bf196e319d05839decb556ea82834a3" name="pcp-pmda-lustre" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="f850d7d9c4b06fa4de67ba248499da668d77f3600cdbbb02e20db9ad3fa15944" name="pcp-pmda-lustrecomm" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="179f888ecd47810e916d95ecf739d4457dc977cbf738b6788d5f93e722151953" name="pcp-pmda-lustrecomm" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="71029392894c102d407d469eaf11d03cf15312b0a0347a264698c4f4e8121e5f" name="pcp-pmda-mailq" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="0459b3bd516ddff8522c9f6dc2d4754a4a4adbb2b5cea19164765246c05ef9ae" name="pcp-pmda-mailq" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="dc773b44d57355f3742e7cbca2e779e5c74ba17bd08a2889b24f5b30f5cea558" name="pcp-pmda-memcache" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="04173e0c99a49111f319dbe17171b8f79ca18ca724af3f8422c82e0dd4ab57ab" name="pcp-pmda-memcache" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="adb2f837ce7ee6f693c199db092ba6dc3f8ac6373ba8ef718200a3a11f42d70b" name="pcp-pmda-mic" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="9e4a95be22b1065fa08676ce4350f28cc32d282903fcd9263b837d389ce38788" name="pcp-pmda-mic" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="d65b0fdbf3e0d210650c47f2112228db0eb85d72431dedc4d03f816068c362cf" name="pcp-pmda-mounts" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="ac3819eb81101528f2ed67eb6f06601e9c10db5974357ea32adb10546a0062f5" name="pcp-pmda-mounts" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="413fb3f93b72340682ffefc4e9c40f42e9e9717625b1f6259723a52d495e9e37" name="pcp-pmda-mysql" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="f72eab66f4c6d793ebae3c4fde568ec9d4c0151bde69d5376e393bd7388b78e4" name="pcp-pmda-mysql" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="4d3ecc74d106fd1a38b434b10ae32286cda189757a1fca241aa3d86a2e0056e2" name="pcp-pmda-named" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="795ea62b21a42f5084303c7961b07287b4cfae2089a70883429f2bbe8e4d1dc8" name="pcp-pmda-named" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="c925a227620d6b3d6b2bde067876dd49d0494905cc5961011fc67372edd17ccc" name="pcp-pmda-netfilter" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="a9fa2be14ecd6ed8c32e122fdeaa8f88c6cf3f2eb934d9225f0f5d262c220050" name="pcp-pmda-netfilter" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="1679c3341ac7477ac4a5504bf1455ac7df80b4a41c5b47c3208884e50fa0420d" name="pcp-pmda-news" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="902e6521eea2da64e32086fb5621819519f47b230789ba068a88c935bd23722a" name="pcp-pmda-news" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="5b1ca5201c48f616df4e556c9e1d17b4370df0adce7ab509a8caf72e9fad753c" name="pcp-pmda-nfsclient" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="4b34eb44e7e3410337edc648ab2804e56212d9306af6a2096cf66e65dd3750ec" name="pcp-pmda-nfsclient" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="e8ea31b13eb3187fc5ba4f17c52c613fc4debb92cdadd99798bab678ecb29b7c" name="pcp-pmda-nginx" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="25acf46163d0ec550f465893f6d1ccfd813075cba36445e3cf17d2f37e8510c0" name="pcp-pmda-nginx" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="2bd45aa40fc3baad8d03d5eef782064f62a2efb46bb09fee2db51ba8b226604b" name="pcp-pmda-nvidia-gpu" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="d2d665b44586c0d4bbd82bcb71abd9d0dcf0510be3de430ecb3f3ed7dd3f6f69" name="pcp-pmda-nvidia-gpu" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="49d063838655231b3e49c8af1ea54134178f2c72cc3379d65facff04cc20bc42" name="pcp-pmda-oracle" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="9495f7199795556cc0fc76bb46d0b90ae931b1e5e34ce294c522cb4b5dc81d88" name="pcp-pmda-oracle" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="2303533f9c666d2fdf97e14b28a6180f4eb32d02b4200e166d6c7786429f4f38" name="pcp-pmda-pdns" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="38ddcf82f256fd85dd01f9515fbd199f718b54b2b836b14f75015a61b01f28fd" name="pcp-pmda-pdns" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="2b2d48f807a7f0b19fab22e6b6f50347d5edcb7200ddc0e2d9b9c7e80d0adf2c" name="pcp-pmda-perfevent" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="5c637ba579304a43aadeaa5286662785a11a2328acc8a28741a164ca93d548a9" name="pcp-pmda-perfevent" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="f74a8555a94cf584c6f3a90b8519d3566555350f90c844639f0f3400daca3d59" name="pcp-pmda-postfix" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="4d4635c1ec67f4c67dc6cb2dc8aa079ce50b634cd7ae0b35695977869ba805e3" name="pcp-pmda-postfix" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="c4e82fd312deaf9790ce839d2adb67c456175341a9778a9ae666eaf3fb77d8c5" name="pcp-pmda-postgresql" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="bcdd3478d12a52d970ade0c75c9375030d4b938eb459fd2828f01a6db1db28bf" name="pcp-pmda-postgresql" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="1374b6640588e80f0f90b50fe06a2ff1a8c9e20a44fefb521ef557189f2ac270" name="pcp-pmda-prometheus" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="f15285e522d89fd2324a23b65c43aaecbb4c1152fdd46ff222c4770ac6558945" name="pcp-pmda-prometheus" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="0f790f18c42d6cc692912fdb7592ed9637d3e13fbd4fd8091b89b92fc665600f" name="pcp-pmda-redis" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="d8a5d3eca6e4c9b28eee98e2e9f57ee2d44fc1f61d6ec9e43ca15a75ef2d4956" name="pcp-pmda-redis" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="cdddca2af56e2383eb5ec004815b1d812f086edf076a3c9617a789c1ae71abab" name="pcp-pmda-roomtemp" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="e18a148d8963f415b5a323e67f7dfd449410362e217c0f9959be640ed35eaabb" name="pcp-pmda-roomtemp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="f05a64128fc3b82aa9f371b620b377c43cf3d4b2c72d9b6d7546ec3a228117ca" name="pcp-pmda-rpm" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="67a6a4e4fd774c85a6c6e32221f5c70c45e71a799b16ee09243af9876408d441" name="pcp-pmda-rpm" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="6645293ef39ce8733c28f72a42f2eb213522d15eb349c6dbf6bc2b85be4ff544" name="pcp-pmda-rsyslog" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="2039529f54de97493f195bda9d893cddbec6560d47160f80ffa0036455844ad2" name="pcp-pmda-rsyslog" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="48f708aaf68ebb25bea329a96ebf2558359fa0c3eda74ac0c8c3a5573baa71fb" name="pcp-pmda-samba" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="ebd1be0b87e97f3190dd43e6033451a7425b5c7615b0a49aac98a74779e9bbcf" name="pcp-pmda-samba" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="024a1ef3a7e965017cd69812fc780ee59a37e5cd37b9c9abb89ba36d626ffc43" name="pcp-pmda-sendmail" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="917c17d68e19174295f87f5da16409428e0aae23fdabaed23042ac3dc5a69147" name="pcp-pmda-sendmail" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="f5d3b2f9f6abc231f61e3f8a36d0b63535243708721fcffa97447da5505c89b0" name="pcp-pmda-shping" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="01ab12de7a2a68633350e1786853b40ec5a345db952cc803ebc34535988c70fa" name="pcp-pmda-shping" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="7d746d16b2d6c2486932876d99f34f93ba46ddf770f5a9cda6ff0ef0766d8541" name="pcp-pmda-slurm" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="86b06bcdb8a2c9922628b90c56148d694c718489be7ef9049dd23885e90c4fe2" name="pcp-pmda-slurm" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="b13480851e344d82e788f2747b47517de3076ccc76031999000d579e6fc771eb" name="pcp-pmda-smart" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="8fa95cc983ae82ebda0c7664aa0cf074ebf45a9969b7d7ead10306f951b967a9" name="pcp-pmda-smart" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="e9b7b79024d7ecb21cde1c28e02f20e2e90d45f50a1f551573c98dd886a51371" name="pcp-pmda-snmp" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="5c8b6594b8f0e867f67aec4a9a868e9368225565b82cbb338816e38a387b9c12" name="pcp-pmda-snmp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="83c4f83140c4dc2741241dde5187d09e4c82e0cad83a3e08fed893ed96a6ceff" name="pcp-pmda-summary" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="d21eaeac98abf111210a1fdcc0ac7acb1dd6c10ade8af3efdcc0b5b73fb18d4b" name="pcp-pmda-summary" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="08c5be410d0af44bea9f3d83a23d2cb2c1b75924d68a65533b46187b160643b5" name="pcp-pmda-systemd" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="d96aa761767244011d12b930bc281fba54daab1322851f78d4e6a750e1ed09ec" name="pcp-pmda-systemd" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="0337b24879a6e932a325614b97a53d4e6fe08be8bc0f6623481fa07fda3a0cc0" name="pcp-pmda-trace" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="5ede9c519ea919936ee4b67d5442f70e2f249068d8486e53127c23a079606404" name="pcp-pmda-trace" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="81a5617669f32881f8a811eb2740c9b938138c9cfc0105eb63ba049ebc8991c0" name="pcp-pmda-unbound" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="8917c6b4dd28257e53dc4217bf9046fe1d626446dfbfa25194c03f4c0142f333" name="pcp-pmda-unbound" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="1064f92437bca23433f1a96dd679c3bf0dffe08c5e7f0f6294932dd949c81375" name="pcp-pmda-vmware" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="5d9251aced944f21478618bc9879b3e7613690cd09f2e93cb4d5b1ecf77dace8" name="pcp-pmda-vmware" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="cc57def1c9d1d451915e6409a62a54abc951bd4bdea83b440617456eebac4400" name="pcp-pmda-weblog" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="bf41c52d5bcfed9f0f24172212a1c9103b7eb7fac51e0b0cd3a5c3a20a93ad53" name="pcp-pmda-weblog" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="9a0a7cbc399a6c3c46f4effe440ef7433cc6779c9f887d66f32b5f36b3e97ead" name="pcp-pmda-zimbra" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="a5cfa7a61b3f875cba5073cbab5ee046e5da68c0c29f8b7b02003cd54b98469d" name="pcp-pmda-zimbra" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="84dca5ef3309d72e26ee0985dbcb605222d53851722aa4a377728608adeb31c3" name="pcp-pmda-zswap" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="26df72f7b01a6895aa0d2761d7543f7fcfba699804ea5133dfdbf55400d9c90f" name="pcp-pmda-zswap" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="aa233eba2335005c2a996a81812551106aacf1e191e9b943ad9f7492df3db66a" name="pcp-selinux" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="6a409f232e8e6c4efab5119345c86d752220ccaf4b233489abf1bcd4fd9552f6" name="pcp-selinux" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="8e47bbf9d93fc0dd8d2f443ddfeb6d7cbd8ba9ea2ede8ae40b038960dd763264" name="pcp-system-tools" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="30ba6979054e56b3abefbc010fb3e6583b94fd702ca380ed393f52910419e47a" name="pcp-system-tools" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="871d42f65833c5299482101268e91da5b665fcf9b893ba1f6a493a96841890b2" name="pcp-testsuite" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="62d8aec8109d45a544f86b3dd79ccadf191695e90a2ed1d96d6d05f3cdf644f1" name="pcp-testsuite" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="53ddcdce3b9019a83476ea4edcf1a47afb8caf5b5e87f0926c9df6fa452a7e23" name="pcp-webapi" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="c39741997c9ee747b041ed88f1644e9f6f41855a7f0434f65fac73e91098bf72" name="pcp-webapi" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="d87818d95bac6068b1c8deb2e39a48f6cd554e4ef47a4273b4eb5e0828ea9ba6" name="pcp-webapp-blinkenlights" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="d5f4d81873a1fdb07f8ac8ee8b0e14493e062af99d3de1b057d2ba9a87974e7e" name="pcp-webapp-blinkenlights" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="777dc9a11d03fcbff25f3fc8960dd08c3dd4c76f13c50bff6bd2073779916783" name="pcp-webapp-grafana" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="e4582a0ef6885276c3c69a6bd1dfb18bbdf89e0266af078eaced49c03e27737a" name="pcp-webapp-grafana" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="e9ae10df597d53bdd7f9e2a58ddd1f1f9f6347f7a2763e2953abd190a9034834" name="pcp-webapp-graphite" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="23cefa374192330c3e2f88b6d3e594c9b4b0e3108f440667bc2116ae4bd5e3ee" name="pcp-webapp-graphite" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="0344f713b4ef2a8f3d64298305d30c54aa1706f1a176552afabbb99b66f49a6b" name="pcp-webapp-vector" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="95f986bb6b7ff974407f842df0e6b9d56326cf3f6e8f2ecd44e26649ba46659e" name="pcp-webapp-vector" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="cd64df6b7f9ed0ed8e4b8e956c090c5896de8550f22a79f07d08fc8b397ddd23" name="pcp-webjs" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="c0c17d754e5e5130192f168cb0a18b2e032ada757f81dcf52aec33132655e891" name="pcp-webjs" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="abb9dce08a14ce69f8b7ffcdd55c16291fe9b16c4375e9d5fe01cb25c7540826" name="pcp-zeroconf" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="9b238f0e2d75affc9fd590cfeceb1dc146bcd32221ff8fea66b2e86ba47f38ad" name="pcp-zeroconf" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="6085297c8e1c3d190f33e092ce665e3d671e0e338ee0fbf5da4791b2f7761aeb" name="pcs" arch="i686">
  <version epoch="0" ver="0.9.167" rel="3.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-1" date="1529668800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-2" date="1532347200">- Fixed validation for an unaccessible resource inside a bundle 
- Fixed test of watchdog devices
- Fixed command `pcs cluster node add-outside`
- Fixed large key files distribution
- Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-3" date="1533556800">- Fixed unhandled exception during a start support check
- Resolves: rhbz#1572886</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-4" date="1534420800">- Fixed `pcs cluster cib-push` for old crm_feature_set
- Resolves: rhbz#1488044</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-5" date="1535457600">- Fixed `pcs stonith sbd watchdog test` error messages
- Fixed avaliable watchdog devices listing
- Resolves: rhbz#1475318</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-6" date="1535716800">- Fix instance attributes setting for fence agents `fence_compute` and
  `fence_evacuate`
- Resolves: rhbz#1623181</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-1" date="1553083200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3.el7_3.1" date="1565006400">- Fixed id conflict with current bundle configuration in `pcs resource bundle reset`
- Resolves: rhbz#1734687</changelog>
</package>
<package pkgid="97034ddaf247ae9ff5a45e7c23d228d7e9afd1d25d37c1e738726fa616710ede" name="pcs" arch="src">
  <version epoch="0" ver="0.9.167" rel="3.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-1" date="1529668800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-2" date="1532347200">- Fixed validation for an unaccessible resource inside a bundle 
- Fixed test of watchdog devices
- Fixed command `pcs cluster node add-outside`
- Fixed large key files distribution
- Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-3" date="1533556800">- Fixed unhandled exception during a start support check
- Resolves: rhbz#1572886</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-4" date="1534420800">- Fixed `pcs cluster cib-push` for old crm_feature_set
- Resolves: rhbz#1488044</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-5" date="1535457600">- Fixed `pcs stonith sbd watchdog test` error messages
- Fixed avaliable watchdog devices listing
- Resolves: rhbz#1475318</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-6" date="1535716800">- Fix instance attributes setting for fence agents `fence_compute` and
  `fence_evacuate`
- Resolves: rhbz#1623181</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-1" date="1553083200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3.el7_3.1" date="1565006400">- Fixed id conflict with current bundle configuration in `pcs resource bundle reset`
- Resolves: rhbz#1734687</changelog>
</package>
<package pkgid="f42ef8ed1478326aa626e176e5e8b6c8fd137ad32886a40b60a33a410466c8fa" name="pcs" arch="src">
  <version epoch="0" ver="0.9.167" rel="3.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-1" date="1529668800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-2" date="1532347200">- Fixed validation for an unaccessible resource inside a bundle 
- Fixed test of watchdog devices
- Fixed command `pcs cluster node add-outside`
- Fixed large key files distribution
- Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-3" date="1533556800">- Fixed unhandled exception during a start support check
- Resolves: rhbz#1572886</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-4" date="1534420800">- Fixed `pcs cluster cib-push` for old crm_feature_set
- Resolves: rhbz#1488044</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-5" date="1535457600">- Fixed `pcs stonith sbd watchdog test` error messages
- Fixed avaliable watchdog devices listing
- Resolves: rhbz#1475318</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-6" date="1535716800">- Fix instance attributes setting for fence agents `fence_compute` and
  `fence_evacuate`
- Resolves: rhbz#1623181</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-1" date="1553083200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3.el7_3.1" date="1565006400">- Fixed id conflict with current bundle configuration in `pcs resource bundle reset`
- Resolves: rhbz#1734687</changelog>
</package>
<package pkgid="e70b0f232e29b0361129b84a66acf3f0f9875c9a4bbbd56e2a734ff040537a21" name="pcs" arch="x86_64">
  <version epoch="0" ver="0.9.167" rel="3.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-1" date="1529668800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-2" date="1532347200">- Fixed validation for an unaccessible resource inside a bundle 
- Fixed test of watchdog devices
- Fixed command `pcs cluster node add-outside`
- Fixed large key files distribution
- Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-3" date="1533556800">- Fixed unhandled exception during a start support check
- Resolves: rhbz#1572886</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-4" date="1534420800">- Fixed `pcs cluster cib-push` for old crm_feature_set
- Resolves: rhbz#1488044</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-5" date="1535457600">- Fixed `pcs stonith sbd watchdog test` error messages
- Fixed avaliable watchdog devices listing
- Resolves: rhbz#1475318</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-6" date="1535716800">- Fix instance attributes setting for fence agents `fence_compute` and
  `fence_evacuate`
- Resolves: rhbz#1623181</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-1" date="1553083200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3.el7_3.1" date="1565006400">- Fixed id conflict with current bundle configuration in `pcs resource bundle reset`
- Resolves: rhbz#1734687</changelog>
</package>
<package pkgid="ac66b31df47beebb1875c047a425bdff4b66bf329fc9731096a072e0fa4972f7" name="pcs-debuginfo" arch="i686">
  <version epoch="0" ver="0.9.167" rel="3.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-1" date="1529668800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-2" date="1532347200">- Fixed validation for an unaccessible resource inside a bundle 
- Fixed test of watchdog devices
- Fixed command `pcs cluster node add-outside`
- Fixed large key files distribution
- Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-3" date="1533556800">- Fixed unhandled exception during a start support check
- Resolves: rhbz#1572886</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-4" date="1534420800">- Fixed `pcs cluster cib-push` for old crm_feature_set
- Resolves: rhbz#1488044</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-5" date="1535457600">- Fixed `pcs stonith sbd watchdog test` error messages
- Fixed avaliable watchdog devices listing
- Resolves: rhbz#1475318</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-6" date="1535716800">- Fix instance attributes setting for fence agents `fence_compute` and
  `fence_evacuate`
- Resolves: rhbz#1623181</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-1" date="1553083200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3.el7_3.1" date="1565006400">- Fixed id conflict with current bundle configuration in `pcs resource bundle reset`
- Resolves: rhbz#1734687</changelog>
</package>
<package pkgid="a8f5c06c32bd55b8a2683c01e7b6464c703aaa4713f1b64d7a754ea7c112cbbf" name="pcs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.167" rel="3.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-1" date="1529668800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-2" date="1532347200">- Fixed validation for an unaccessible resource inside a bundle 
- Fixed test of watchdog devices
- Fixed command `pcs cluster node add-outside`
- Fixed large key files distribution
- Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-3" date="1533556800">- Fixed unhandled exception during a start support check
- Resolves: rhbz#1572886</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-4" date="1534420800">- Fixed `pcs cluster cib-push` for old crm_feature_set
- Resolves: rhbz#1488044</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-5" date="1535457600">- Fixed `pcs stonith sbd watchdog test` error messages
- Fixed avaliable watchdog devices listing
- Resolves: rhbz#1475318</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-6" date="1535716800">- Fix instance attributes setting for fence agents `fence_compute` and
  `fence_evacuate`
- Resolves: rhbz#1623181</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-1" date="1553083200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3.el7_3.1" date="1565006400">- Fixed id conflict with current bundle configuration in `pcs resource bundle reset`
- Resolves: rhbz#1734687</changelog>
</package>
<package pkgid="ec3c7bd5d8c06817b1f8f4fb2032d9b3b8fefd2cc74d2c965dd46852920b3510" name="pcs-snmp" arch="i686">
  <version epoch="0" ver="0.9.167" rel="3.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-1" date="1529668800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-2" date="1532347200">- Fixed validation for an unaccessible resource inside a bundle 
- Fixed test of watchdog devices
- Fixed command `pcs cluster node add-outside`
- Fixed large key files distribution
- Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-3" date="1533556800">- Fixed unhandled exception during a start support check
- Resolves: rhbz#1572886</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-4" date="1534420800">- Fixed `pcs cluster cib-push` for old crm_feature_set
- Resolves: rhbz#1488044</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-5" date="1535457600">- Fixed `pcs stonith sbd watchdog test` error messages
- Fixed avaliable watchdog devices listing
- Resolves: rhbz#1475318</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-6" date="1535716800">- Fix instance attributes setting for fence agents `fence_compute` and
  `fence_evacuate`
- Resolves: rhbz#1623181</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-1" date="1553083200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3.el7_3.1" date="1565006400">- Fixed id conflict with current bundle configuration in `pcs resource bundle reset`
- Resolves: rhbz#1734687</changelog>
</package>
<package pkgid="a388b0862288792a1e760a26391d915ebd524a17e1f491bfa774a67b14e4d315" name="pcs-snmp" arch="x86_64">
  <version epoch="0" ver="0.9.167" rel="3.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-1" date="1529668800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-2" date="1532347200">- Fixed validation for an unaccessible resource inside a bundle 
- Fixed test of watchdog devices
- Fixed command `pcs cluster node add-outside`
- Fixed large key files distribution
- Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-3" date="1533556800">- Fixed unhandled exception during a start support check
- Resolves: rhbz#1572886</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-4" date="1534420800">- Fixed `pcs cluster cib-push` for old crm_feature_set
- Resolves: rhbz#1488044</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-5" date="1535457600">- Fixed `pcs stonith sbd watchdog test` error messages
- Fixed avaliable watchdog devices listing
- Resolves: rhbz#1475318</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-6" date="1535716800">- Fix instance attributes setting for fence agents `fence_compute` and
  `fence_evacuate`
- Resolves: rhbz#1623181</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-1" date="1553083200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3.el7_3.1" date="1565006400">- Fixed id conflict with current bundle configuration in `pcs resource bundle reset`
- Resolves: rhbz#1734687</changelog>
</package>
<package pkgid="fcef32f3212645e45a56459dbff1a94f34f5800d5749939168bdfbabf59725eb" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="04fcd62c4895f2eceea418652c0acf3e86b6d945d55e605a26da7b538a01da17" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="ed2c06d6fe5973239a176af03a28e5b26704ad0c6d9ed8bd3a4e52be6508f4d0" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="78c5c1ea26dd5e149abba74ccbf64230f10a046b11e4b224b82ebc5bb4bc5649" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="c371288b30b88970082178a4af6ca09874b89a5d8ee64dc1c1e78c0497bb435d" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="6bea9c117c7f3fbd1b6224a717233becf93e5a905cba2b9887e8b8eb02c6137d" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="2b02043f9d15895a5052d4c0a12ab8f5af54fbca3a5dcb2d5d7f82c28fc6f1f0" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="81f1b92d396e3b5148fde027c6b50774ae29cb27b732ad08baf14a4155e771b1" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="2bb016328dff24aa783ccb224ee8e5c4e9a9b4df372ca53fc10a1d6d08b80ef6" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="ed8f403f7ba37f6fb580c9f1e84e988f22a676b9f42a5ea5c67630cef294002c" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="a6768c3745c9815fc3ee4a1df0bc49acb3f5095c1a04145104f411f44b0087a1" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="2877f32ce70159b7353e2c706b34a215a4d9c45731321200617b3682792d5e50" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="796411d448d4c930e75dd9461174757eedb0ccb92129488e2c479b9d215b4cc3" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="e9596ea346e6639279d03daa86e7bc712bbad1235f0f12f8c084201d70132521" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="4c222cde88f72b3e66529acc4b998029527f0977452e9fbf331d501834c4bcdc" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="a73415e513a55c1b1ac2cd17d1355a7cfc4e9efbe28f0df621715e85c86a24ec" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="f3d32356799d8e0b3a7690dec9f27abc4da434a10b5c14a4c2187484a1e78ea9" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="71489ee020d4c5ecd0882929ebe64a856db6f23e57080e70472bb6cfa9fc9e5e" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="27db2d7758f0166b727084bbbb1e843b0d48638de0517a40f1b90fbd5fa07d63" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="c000238b857d3e0c19c754480442195f477fdc326e747e88f9445c630e39c47f" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="b5cef423032744ebc4281b5af193f0e0cd763945902fa57439bd699d3083bec3" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="1ce6a448ef36b40e3b42930d41cf243ed028645875686ca8bdb4fa216fdb7890" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="642d7c1dce684ccbec199df1467121f803d4193cd5f5f37bb4774329bc43ba69" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="8609f31a54f3db74e5dc6e56c490d75650f38743e0a6248c19cf76b7af253546" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="9ce2c661a72df005dd027412cbd9dc0d968a896304cbd658f86f7b2f5134cc0a" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="02956633423946a13317436f82fa97130579251ab854e271a0c8316148428111" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="302897eeb176299ccde198166c0764d7b298c515598ead93b6557e4dbfed8a6b" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="426785742893e09a2a9f3feda98e582c3f78f73d496f969590228ac1585b9447" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="c192628b8029a04f5703357a44c71e3fc37e3df80137194ff2491540c8f66634" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="eed7205db7ef63c8cc9e9cb7b17651ce2ba006f13982d39b5dca52709699dbbc" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="5da3cea9a535af3d97bc0b8ddee88b20658ccb72a44a574aff9f7b8b342d78a8" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="a548a6d6c8272adb8ef11f36f25928b3cd9a7c6997c264ae97af7bb5ecb15543" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="21.el7_7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="1c5255805f7f86603f9f9ffb53fd4776968c7228ed722cc7fae72003ac42e08a" name="perl-PCP-LogImport" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="92df9663d9c02420f573630aad4298185927a6519891869cf591fb0bd4673c1b" name="perl-PCP-LogImport" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="e3bc538d9af79522fb4760a6a8137e8f582ebe762ec98776eb26dcb86819b7ef" name="perl-PCP-LogSummary" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="e00955431404ffe2b30cd432ec8f8c6e05f39d7eb74cf0d1121359ff61b7b827" name="perl-PCP-LogSummary" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="7fa78f630e89ee7fc99f7695bbc16a241c197a8f1f7cd66be220402d2d9db97c" name="perl-PCP-MMV" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="8bbae7f476d2ef8aa0b3740db48bb1897d15b7e878c1df269e8dc0126af299f8" name="perl-PCP-MMV" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="1bf82c0bb34152d72a7971c76b9a3a2d66937aaf77aa143ee5b8622453c12b54" name="perl-PCP-PMDA" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="f9436096592536167ea577abc54e03b62a4f0101d3167e5e2216477c612be2ce" name="perl-PCP-PMDA" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="57f9808cb7e4649cf990ae427cbbb4bee330964606dfbf72eca76f4de2a8abb6" name="perl-Sys-Guestfs" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="e78055873c3f344c23b8dddb864d809b28f5a7e65f61434212e5540e1296e657" name="perl-Sys-Guestfs" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="4d66a95f589a07d18ff6e9fe42e84ae46f0377ae26fbf29eeb108691ffc8d615" name="php" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="0834be09c086f3e7745a869305f00fe33eab60b84f8ac01bba238a802e65cb58" name="php" arch="src">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="275393eaa5826d76dc8995d814977c18889a67c2dd1a792e710305c55c2c5b9f" name="php" arch="src">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="f3a507915a3952b0a8609a689f6e99ad604f78d9a05595010c44ba7ab3c07828" name="php" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="20837a56a3f6e96a4105d3200272fdc06a13f647d523fde59f6c11ef48e64ff5" name="php-bcmath" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="b233d35f36d32371dbc491c8959b6699455f028e7b475b98c691e67268acaae6" name="php-bcmath" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="57f8aaa059714d0e883469968a51e428df46e63feb13a700d76d94989674b5cf" name="php-cli" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="fabc90807c20d50e5c1d6c3a05298fa284f4c402f1475bb2411d27a151b77ed6" name="php-cli" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="553b98feef4b86651eca4ebde0cf48a24d81c48877e976d7672e2f29362bfea4" name="php-common" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="fa97e4474c6ea6e41e0fa4017d40361d637289fd680938dba04fa78bb581a19f" name="php-common" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="a4547ec2bef5ed46868b7be2381a280c7a275e695a4157b9aab7f2a42731502e" name="php-dba" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="8d9470f84ed7e5a1e34e300312cb2da9d6f28805234daed66f929b396c28cda9" name="php-dba" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="366df6ce04cdd0d37444c67fa05536d65873f14ccb36689a20a0fe6a81885d8c" name="php-debuginfo" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="4aa2bbde9e2a3dd5d7d47e2bb8d00584353b69f6699953daebf6400e8caa4e51" name="php-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="667012ad25ac341b703742dfda2abfae84f6ec5cac9e28f1bf40d66248738e02" name="php-devel" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="f9781f61b4bb531a7a0985556e22cef662dfec65f0bd54317ea36873c3e25275" name="php-devel" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="3e732b6e5f027f679071101ff3c0dc24925c4479aa786db0df6e08c54e86c7d5" name="php-embedded" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="c484b76ca6aa84b75c9f6c337ab1198fe5170de0ae832411cdd9a5a1aa7af6bb" name="php-embedded" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="56c08420d5f7bc1e1b99b30bfd4f4bc373b8abef1918599b09d31cd908e589f3" name="php-enchant" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="112f1d3a4c9965034b21b3a4c5439381aa9b1de63f7757ba52fd43635f9ad959" name="php-enchant" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="c6000d3b21ff1a047410f31e0e8080d26536ed9a6eb523826325db7fbf485a91" name="php-fpm" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="c7dae4084a80748f84ae83d55e6295cab77d6722d69cf77a3dd605dbc92f61a0" name="php-fpm" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="ef1844533b35e8e90a2aa043a0d0032888646f8473aed0048dcd943d10c84bd1" name="php-gd" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="d9e4253126963b6d9de90cc349aae09c36a275bd59b04a412586378106fc6c88" name="php-gd" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="f5f0ef7ce55371b34a45ed6c2acc41efac22b542606bc9ff4c2b9dcf60bde133" name="php-intl" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="5551c8154a20f6fefd75d79e2c0c5bcee9c30d51c6fe83b058df0932b1ea66ff" name="php-intl" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="dbef1e99c44af80c5cbeb09f86766c5f00d9298ab4f779866370ec5b0aeea476" name="php-ldap" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="11d88919fbe3db3495b17a5692202746df36a5845296f4b74488a906aacd9fe7" name="php-ldap" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="15af5e800af03274bb8e032cc34628e5a9676befba377b885e1597f2ad777e33" name="php-mbstring" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="d1f04e9a7c8f8c4639ef1152ea1fdc9ced247009a2eb8c0f766915956b14ad46" name="php-mbstring" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="a73abdf0125dc15b0a0f2b5fd7ab64bfc6889d38feba47612d4e9125c17f0c97" name="php-mysql" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="fb562b02e40c51062dbb903014b9da0fdae248ea88b795f07d7194baaef50580" name="php-mysql" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="b4942935e526bcfeb1fdeda2d718fae56b50ef75a429b29cc9d4e68c04fd0727" name="php-mysqlnd" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="0ff833858cafc618fc23ccad6191d0939072ce0a5b4a5289419ae8980a93570a" name="php-mysqlnd" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="4e8b13995c754bd325bea7e40f90842d043d4a1d0a075cb8d3034b3b68cb63df" name="php-odbc" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="aa13a868f62b16c53532c1ad886f1ea199fa7c4bcf40280854e5857da9809386" name="php-odbc" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="2e17154e22fbfad0ffa9f73449a08353f7e024ce1257eb171487387bb114fe62" name="php-pdo" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="38da9e1c30152539415abd50afeff86b6a7f68ae5cef4c149aa96b866c978ae5" name="php-pdo" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="1ec407eeffaf843d55ca1a37d8dabe914956f4bfe87eab0055866f7ad400a24f" name="php-pgsql" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="d1f8e0c588c56c940edf3f6e606d0e815f05d3a182bfe3fdaf3b405f04bbc5a1" name="php-pgsql" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="69fa935a2678087a7b8096b92379cae546d521e4eac4ec2536f500824c977b90" name="php-process" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="a6a37c2fa4e6c1155c6605e726124c48a76ab86bd56320d61e9d4c72ee4477c7" name="php-process" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="3622e932022eaaca30bd7c7177baa6a0174b41dff5239c69fdaa5261cea34522" name="php-pspell" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="044eaf679125b3b705658b63ed7d96a88d2eab9a83a525c3e5cbb0b8c1125f0a" name="php-pspell" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="7a52cd859aeb25f276d57f9e4fbd4f72e89a8ac75ad8d0089a9eb83076c0158e" name="php-recode" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="2f982a845e1304247665b863a8a964e4cde97fd74426a5ff369531b82e7af751" name="php-recode" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="d5dc1c1e4841836b9b7b36efecfc625e50c6801e555dab23c74e07ddd0330fee" name="php-snmp" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="f0717f9ef09b796c72c353b8eaee96bc6d46e8e48c01d3b126b2ccd1a8479cc6" name="php-snmp" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="9a767faf9e11e3ff4a8fa2a35b1eca90783ef8ecbe8f670824b1a2f66d43f516" name="php-soap" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="88994a77ff361c21e4fd571f6f020335fcd9459b80d2b0dda9709f10aba08502" name="php-soap" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="a66ef4bbb625dbac8d378e093ecf06338447590db35afae76bd001ab3e5087b1" name="php-xml" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="2b702c33f0eb48f279bf6db0be7abe1fe0e0b450e1af33bf68189ea4086c4248" name="php-xml" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="10876cab4c30253ac3004a40a3402c9a4df6b69b9a71d68099cd809b37a976fd" name="php-xmlrpc" arch="i686">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="ab02bd3a5febf32c3cbb18f0c19c8c745d3e24999c8c0341f89f7a388751cb9a" name="php-xmlrpc" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="46.1.el7_7"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-44" date="1507809600">- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-45" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46" date="1529409600">- load openssl configuration file on startup #1408301</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-46.1" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="28bcd15b1f0b7638a43c44b37e1d96813b510c26fb9f25343b9cb3102f34f394" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="1da1976b9c2a716e50df6ebf4ee9844f99805db0c87b84a5739f0a0988770ac3" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="5d1b84a9cdecdf8edd88d4ac554e921e8b1ff628eb30123e326f5003013b1cdf" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="fe25901e53e317e2f208cfaf89bd9df23c3c01f637dd6ccc8780588e797fd00a" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="a11089985c3cd853e2a81006c8368a9d248be20016af2caa84184cea72043e92" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="19231cc5f742c4d6a4736e43ccd780d4dc1d5e5599414bef05911ae81e7c2723" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="667782ff19edeb1945ef6393a31fe59135f35be1498029bf627a313a01b5f90e" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="c1bac692b8c0adde12ad2682bf404394e893218c6d430f545eb5c714d83084b4" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="79c2aadaa53d1c2aab9e592d02d8201987745e28b480300a6b84d418e8276102" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="4de7b8cef28a7c9ba6b86e66803db3031551a791fb812fe8a83d9136fcf47475" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="78a5be07f5fee387cf5ebfdd6b4ed217f6cbea6d4308453829855e53df958f01" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="00f8bc7334a22827d5af1467dfb1eff632bf21eefb23ca5329968cd7633ebaf3" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="3b4d0dd7c6747f8f89b7900e2712c97e07f7b380a939f0d5f1b3140153251cc3" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="3b84291ee5290492d5be8ca5eee268cde8569a30a8e047d04e1c36ce3d8f7e4b" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="007b3172a4a66c5361c030d0ddda5dc8cd4fde018e03151131cb67aced9910c1" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="ec4f1872c0084aaa29c9b4a9c0f7d920d231932c7556424e5a5895ac92bb57f6" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="12ee6ee8554155f89930b838356200567e925ca3fef9729faae599763b03c8fa" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="8eb09df15f932d0bc12e923e80c5843fc80f8cb2a983d9fa43ec72569ffe340a" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="41d2a709ffb2d12c0e2e8aa55933b3194264165db75c360dee83fd8d77b2f381" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="b87d66b505590f3d1c7426732fe7affa7993d4288eb4d691299a9f3176bffd0a" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="5cd674e3bebd6e0469552078a7f740e6f57fc8f569018bbca6a1405767e48ef4" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="0f45b5995c3eecbeed445463fade6d53d8adf2d484ecad14816e9ccc59e57d8d" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="66b6192f1366af064eff9b05e18fa1d5a256cc12e5129503ef6fc7949fc836e5" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="fd90b11ca8f1cd291c3cd63c759e95b9572e02e49b3b365fdc9ddab1b502cb28" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="a7ecb63113e7f4783421cded42869a3d59297bcc74faffcbf61cfedf76300c83" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="959505c26dd4af0029f0a276e4378f946fb7b3de4bfffef06e3de3a75c4741ce" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="26eceecb8df20f833b5464a591e58c0634c418a1aa3104ee1abbdab70ae018b6" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="29db6ca28240d880d1938929b409bb6d4fc179872c869a8b607029b05dbca469" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="9b446a12be473d2014ef60b737e4a33eb8b8ef160a3406a481999cf009024dca" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="d04cdaf5ef5e10efce7dcbd067f094a62b38026cd95619c3a8fcaf18916a978c" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="25decb6e6dd4978f8c489b41ad127100febe3b2934dd6dac513725facd5f136b" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="a384fb9f41a432406742afb4f78bde021f94498c431687b510cb6ad72104cce4" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="d270362daee9fd3fce929313150c407619e01cadcc22eb42f1b01d9c70d33ca2" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="a932f4e21eba9b806abd8088a2c445ab3a564f7cd51a99105382146ef8175658" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="90b598990a3b38f611937ff991ead5a1e8d8de90b3dc275d34a75636bece6c7e" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="022f8456b9dca36a160e82e99c8b484cbc2cea576ae87218ab0a31804a61ab3d" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="6aba58f97e9004b0306421584cb6c0654d3b8f8f22981ee2f8bb5f9105374b91" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="8e7c89907b254a73ff446d0b57a1edf5658d74e379630de13bdc4721f8c55891" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.5.16" rel="5.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="c06840baa37c456423a916f7249b31f55957d6d46fa38ed1d3ac55ab8ef1bd6d" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="79c9550724d857f4fe1fdf9c813a37a1da58f557c230a96e7d948ab1a1fe4362" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.5.16" rel="6.el7_7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-1" date="1552910400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-2" date="1554379200">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
  Certificate Request [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-3" date="1561032000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1638379 - PKI startup initialization process should not
  depend on LDAP operational attributes [ftweedal]
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.16 in RHCS 9.5</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-4" date="1566216000">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
  custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-5" date="1568030400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
  [rhel-7.7.z] (cfu)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.16-6" date="1571054400">- ##########################################################################
- # RHEL 7.7:
- ##########################################################################
- Bugzilla Bug #1754845 - number range depletion when multiple clones
  created from same master (ftweedal)
- ##########################################################################
- # RHCS 9.5:
- ##########################################################################
- # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="dc2ccbbffbc84fb2f42c7d3f13b4af8d6f697b465cc953819cb40efc5f3e408a" name="polkit" arch="i686">
  <version epoch="0" ver="0.112" rel="22.el7_7.1"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.112-14" date="1505822400">- Rebuilt for mozjs17 48-bit VA on aarch64
  Resolves: #1436518</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-15" date="1527768000">- Localization *its* files required by newest Gnome Shell packages
- Resolves: rhbz#1584533</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-16" date="1532347200">- polkit spawns zombie processes
- Authored by kwalker@redhat.com
- Resolves: rhbz#1570907</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-17" date="1532433600">- Bus disconnection report moved to debug mode
- Resolves: rhbz#1249627</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22.el7_7.1" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1730093</changelog>
</package>
<package pkgid="8dd8f745e87909a31ee11e1381913f250a750c4b41f5cd92887d4a47a5403f69" name="polkit" arch="src">
  <version epoch="0" ver="0.112" rel="22.el7_7.1"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.112-14" date="1505822400">- Rebuilt for mozjs17 48-bit VA on aarch64
  Resolves: #1436518</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-15" date="1527768000">- Localization *its* files required by newest Gnome Shell packages
- Resolves: rhbz#1584533</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-16" date="1532347200">- polkit spawns zombie processes
- Authored by kwalker@redhat.com
- Resolves: rhbz#1570907</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-17" date="1532433600">- Bus disconnection report moved to debug mode
- Resolves: rhbz#1249627</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22.el7_7.1" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1730093</changelog>
</package>
<package pkgid="24c5819eeffba81b9be87b8402de70a0a55f41e92745fd37bdd79513d2500bc4" name="polkit" arch="src">
  <version epoch="0" ver="0.112" rel="22.el7_7.1"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.112-14" date="1505822400">- Rebuilt for mozjs17 48-bit VA on aarch64
  Resolves: #1436518</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-15" date="1527768000">- Localization *its* files required by newest Gnome Shell packages
- Resolves: rhbz#1584533</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-16" date="1532347200">- polkit spawns zombie processes
- Authored by kwalker@redhat.com
- Resolves: rhbz#1570907</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-17" date="1532433600">- Bus disconnection report moved to debug mode
- Resolves: rhbz#1249627</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22.el7_7.1" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1730093</changelog>
</package>
<package pkgid="132c6465f50b11e43ce17c2432cdc4e564e13e975f56b1e9ed47b89a63fd3495" name="polkit" arch="x86_64">
  <version epoch="0" ver="0.112" rel="22.el7_7.1"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.112-14" date="1505822400">- Rebuilt for mozjs17 48-bit VA on aarch64
  Resolves: #1436518</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-15" date="1527768000">- Localization *its* files required by newest Gnome Shell packages
- Resolves: rhbz#1584533</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-16" date="1532347200">- polkit spawns zombie processes
- Authored by kwalker@redhat.com
- Resolves: rhbz#1570907</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-17" date="1532433600">- Bus disconnection report moved to debug mode
- Resolves: rhbz#1249627</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22.el7_7.1" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1730093</changelog>
</package>
<package pkgid="fedb7e3c6089b3fdaaa9ff8eb7d0d613399a629a990b312de79865cccddd48e9" name="polkit-debuginfo" arch="i686">
  <version epoch="0" ver="0.112" rel="22.el7_7.1"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.112-14" date="1505822400">- Rebuilt for mozjs17 48-bit VA on aarch64
  Resolves: #1436518</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-15" date="1527768000">- Localization *its* files required by newest Gnome Shell packages
- Resolves: rhbz#1584533</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-16" date="1532347200">- polkit spawns zombie processes
- Authored by kwalker@redhat.com
- Resolves: rhbz#1570907</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-17" date="1532433600">- Bus disconnection report moved to debug mode
- Resolves: rhbz#1249627</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22.el7_7.1" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1730093</changelog>
</package>
<package pkgid="88f584dece7c2fa6d88bb0fa6629ed5a9836ca7cdecd46015e22c48e04024165" name="polkit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.112" rel="22.el7_7.1"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.112-14" date="1505822400">- Rebuilt for mozjs17 48-bit VA on aarch64
  Resolves: #1436518</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-15" date="1527768000">- Localization *its* files required by newest Gnome Shell packages
- Resolves: rhbz#1584533</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-16" date="1532347200">- polkit spawns zombie processes
- Authored by kwalker@redhat.com
- Resolves: rhbz#1570907</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-17" date="1532433600">- Bus disconnection report moved to debug mode
- Resolves: rhbz#1249627</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22.el7_7.1" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1730093</changelog>
</package>
<package pkgid="babb5b828596c573d8b2fef5add89a3ff0aed1fb6170be6c528d03ccc5de231c" name="polkit-devel" arch="i686">
  <version epoch="0" ver="0.112" rel="22.el7_7.1"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.112-14" date="1505822400">- Rebuilt for mozjs17 48-bit VA on aarch64
  Resolves: #1436518</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-15" date="1527768000">- Localization *its* files required by newest Gnome Shell packages
- Resolves: rhbz#1584533</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-16" date="1532347200">- polkit spawns zombie processes
- Authored by kwalker@redhat.com
- Resolves: rhbz#1570907</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-17" date="1532433600">- Bus disconnection report moved to debug mode
- Resolves: rhbz#1249627</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22.el7_7.1" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1730093</changelog>
</package>
<package pkgid="88be8c64f284cfd325538bcca1c480e96e2692933dfb758f28c0e833509bc42e" name="polkit-devel" arch="x86_64">
  <version epoch="0" ver="0.112" rel="22.el7_7.1"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.112-14" date="1505822400">- Rebuilt for mozjs17 48-bit VA on aarch64
  Resolves: #1436518</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-15" date="1527768000">- Localization *its* files required by newest Gnome Shell packages
- Resolves: rhbz#1584533</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-16" date="1532347200">- polkit spawns zombie processes
- Authored by kwalker@redhat.com
- Resolves: rhbz#1570907</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-17" date="1532433600">- Bus disconnection report moved to debug mode
- Resolves: rhbz#1249627</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22.el7_7.1" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1730093</changelog>
</package>
<package pkgid="ab4831f03fbf97851cfed9e20766fd3fc92bbe17e4b6eef83a47aaa727c35efc" name="polkit-docs" arch="noarch">
  <version epoch="0" ver="0.112" rel="22.el7_7.1"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.112-14" date="1505822400">- Rebuilt for mozjs17 48-bit VA on aarch64
  Resolves: #1436518</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-15" date="1527768000">- Localization *its* files required by newest Gnome Shell packages
- Resolves: rhbz#1584533</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-16" date="1532347200">- polkit spawns zombie processes
- Authored by kwalker@redhat.com
- Resolves: rhbz#1570907</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-17" date="1532433600">- Bus disconnection report moved to debug mode
- Resolves: rhbz#1249627</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22.el7_7.1" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1730093</changelog>
</package>
<package pkgid="cc36485e3d363b0c81fc3dd4ee7950f7ba17528ea8dedd2dafdb0c0b176c3d67" name="polkit-docs" arch="noarch">
  <version epoch="0" ver="0.112" rel="22.el7_7.1"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.112-14" date="1505822400">- Rebuilt for mozjs17 48-bit VA on aarch64
  Resolves: #1436518</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-15" date="1527768000">- Localization *its* files required by newest Gnome Shell packages
- Resolves: rhbz#1584533</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-16" date="1532347200">- polkit spawns zombie processes
- Authored by kwalker@redhat.com
- Resolves: rhbz#1570907</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-17" date="1532433600">- Bus disconnection report moved to debug mode
- Resolves: rhbz#1249627</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22.el7_7.1" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1730093</changelog>
</package>
<package pkgid="8b808c15162bc169f5e8b3a5a2acfcf06200feafeec1e00253f0402913e08a1e" name="postgresql" arch="i686">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="0b561f5268041aacc204f3d0eafe15fa78c4cd7a9d2a6acc7af6b4f3c2e65d3a" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="9b8dae99ebbd56c1cd6a8c4cd66a98b3063e4f636d12ba033d6f8c23adb764c4" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="12bb1561a0abcc17096154653eeee7bc5db0e48bee13f4d2d292b7f7a2a3fbb7" name="postgresql" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="c80d8e82de39ef23dc697227111b4f0182e0e094c230162bda8a6d0bd5b61c7c" name="postgresql-contrib" arch="i686">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="6c4d81295af6682c4e0887d662521ea0f8d58bddbad92d149761f90c0f5f59ab" name="postgresql-contrib" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="4669be5c8a99fd6901b2c7dfd5fca41850ced8984e8cef082b1e01daeca70501" name="postgresql-debuginfo" arch="i686">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="5e5cd3feadddbd8db61d2feec9c41f6c18e60751cdb66e748dd617ca8c6529fd" name="postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="ecb869b8c5ee5203d5616e1acebdaed27b34867186d2787944aa5b374f069f41" name="postgresql-devel" arch="i686">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="39df19ab8dc078bd45b07cab1c0ca292707e18a36d7327f1c9c0326f1f85700a" name="postgresql-devel" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="230508c653b8d5197992047f6fcc4bea23474828bb18aa651192f68eeb6513ac" name="postgresql-docs" arch="i686">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="eacdb871d27aecd80cc5c445822150865cbca433f3687370ef7820615615499d" name="postgresql-docs" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="dbadb60f75c8a47e4f6f900969da644072cb08521319f559d79f29cbfa01e34d" name="postgresql-libs" arch="i686">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="908395501ccb946abec13f7b423a15eeb45b95dc1957cf6a7599e11292f1e1cc" name="postgresql-libs" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="6943b9cc3d881ef8db1c4dd4ef1b741428c499f116989d371ce900e316fe1b6a" name="postgresql-plperl" arch="i686">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="6392e19f4a4c0e1bed2031511ab52a37bbfbb2d97c25b8f97c52738a6f10162d" name="postgresql-plperl" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="dc9a8cfd1355844256d39f315969b2da341c0ee46785f203d75ecc615bfba8e4" name="postgresql-plpython" arch="i686">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="7775e570f8309ecdf9b0377670c20e5b8e70527452092406e6ccb8158c676ee0" name="postgresql-plpython" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="f68a24a41793b7c1b770d11ef03c593bb0036f5bc6648ecc043680fdc0a6bf40" name="postgresql-pltcl" arch="i686">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="a23c2c52db38985cab9d1afc7978e844d98e9143188b38ffdcd8f978c19f93d2" name="postgresql-pltcl" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="4c05251d7525659abbbabe0cbffa82d6a0aee4bdd80f52446be6b137e067e02c" name="postgresql-server" arch="i686">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="7e2a89c17faf16e5eab2be971fcfacfa943fd81efb56f0f471242317bba0b535" name="postgresql-server" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="a4a1348250473ac4513fb04e40b011061f0bb2f7a1f5121ac467c5b0637849d0" name="postgresql-static" arch="i686">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="ce107c4d006a6b90bbb923451a6710d5838e6228102ffd86545824174e201a20" name="postgresql-static" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="132aad79742bf5d7b7d82e163effd82a3baf028605f848ca43e4986914735e0d" name="postgresql-test" arch="i686">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="26dcf4b92669e3226918c46d285c43f1b5d9b118d1cb85dcfa194127d424164b" name="postgresql-test" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="efb26fa6ac3c4386fbe758e7ef61cccc440c64321bf9c7c5b0eeff7c624934ef" name="postgresql-upgrade" arch="i686">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="1a0542dc9ddcbedbacbae604253152fe8aa40c2bca3fd0ca29b9d7d35b962129" name="postgresql-upgrade" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="2.el7_7"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-2" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
</package>
<package pkgid="6c16361c22ea86a015528124561d4185a6ad31d9b392d36d90448e8f7d2c5a77" name="procps-ng" arch="i686">
  <version epoch="0" ver="3.3.10" rel="26.el7_7.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-18" date="1515067200">- sysctl: empty value is now accepted
- Resolves: rhbz#1507356</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-19" date="1516017600">- top: locale independent float character in delay now accepted
- Resolves: rhbz#1182248</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-20" date="1516017601">- free: segfault when system memory exceeds petabytes
- Resolves: rhbz#1263765</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-21" date="1524139200">- ps: new format option LUID (LoginId)
- Resolves: rhbz#1518986</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-22" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-23" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-24" date="1551182400">- top: Do not default to the cwd in configs_read()
- Resolves: rhbz#1577023</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-25" date="1553688000">- ps: recognize SCHED_DEADLINE in CLS field, upstream backport
- Resolves: rhbz#1692843</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26" date="1555070400">- free: unreclaimable slabs counted into free memory, used mem incorrect
- Resolves: rhbz#1699264</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26.el7_7.1" date="1568635200">- top: segfault if killed by sigterm in batch mode
- Resolves: rhbz#1739372</changelog>
</package>
<package pkgid="179aa8a26d1e5bcf0eb9cac59d3dfaf2206bc3450c27fb32af583a2eaa16f533" name="procps-ng" arch="src">
  <version epoch="0" ver="3.3.10" rel="26.el7_7.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-18" date="1515067200">- sysctl: empty value is now accepted
- Resolves: rhbz#1507356</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-19" date="1516017600">- top: locale independent float character in delay now accepted
- Resolves: rhbz#1182248</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-20" date="1516017601">- free: segfault when system memory exceeds petabytes
- Resolves: rhbz#1263765</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-21" date="1524139200">- ps: new format option LUID (LoginId)
- Resolves: rhbz#1518986</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-22" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-23" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-24" date="1551182400">- top: Do not default to the cwd in configs_read()
- Resolves: rhbz#1577023</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-25" date="1553688000">- ps: recognize SCHED_DEADLINE in CLS field, upstream backport
- Resolves: rhbz#1692843</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26" date="1555070400">- free: unreclaimable slabs counted into free memory, used mem incorrect
- Resolves: rhbz#1699264</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26.el7_7.1" date="1568635200">- top: segfault if killed by sigterm in batch mode
- Resolves: rhbz#1739372</changelog>
</package>
<package pkgid="9145303d6a25bd1a3e0fd39e063dd0af4e2f45de57f9024f3be11c8b9bf56b06" name="procps-ng" arch="src">
  <version epoch="0" ver="3.3.10" rel="26.el7_7.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-18" date="1515067200">- sysctl: empty value is now accepted
- Resolves: rhbz#1507356</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-19" date="1516017600">- top: locale independent float character in delay now accepted
- Resolves: rhbz#1182248</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-20" date="1516017601">- free: segfault when system memory exceeds petabytes
- Resolves: rhbz#1263765</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-21" date="1524139200">- ps: new format option LUID (LoginId)
- Resolves: rhbz#1518986</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-22" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-23" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-24" date="1551182400">- top: Do not default to the cwd in configs_read()
- Resolves: rhbz#1577023</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-25" date="1553688000">- ps: recognize SCHED_DEADLINE in CLS field, upstream backport
- Resolves: rhbz#1692843</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26" date="1555070400">- free: unreclaimable slabs counted into free memory, used mem incorrect
- Resolves: rhbz#1699264</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26.el7_7.1" date="1568635200">- top: segfault if killed by sigterm in batch mode
- Resolves: rhbz#1739372</changelog>
</package>
<package pkgid="3a2e9fee64b46852a3e6dc2d521c729717674f575ff4a1c346b5e4d46ac6eba0" name="procps-ng" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="26.el7_7.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-18" date="1515067200">- sysctl: empty value is now accepted
- Resolves: rhbz#1507356</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-19" date="1516017600">- top: locale independent float character in delay now accepted
- Resolves: rhbz#1182248</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-20" date="1516017601">- free: segfault when system memory exceeds petabytes
- Resolves: rhbz#1263765</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-21" date="1524139200">- ps: new format option LUID (LoginId)
- Resolves: rhbz#1518986</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-22" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-23" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-24" date="1551182400">- top: Do not default to the cwd in configs_read()
- Resolves: rhbz#1577023</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-25" date="1553688000">- ps: recognize SCHED_DEADLINE in CLS field, upstream backport
- Resolves: rhbz#1692843</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26" date="1555070400">- free: unreclaimable slabs counted into free memory, used mem incorrect
- Resolves: rhbz#1699264</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26.el7_7.1" date="1568635200">- top: segfault if killed by sigterm in batch mode
- Resolves: rhbz#1739372</changelog>
</package>
<package pkgid="a3e7d22d2c23112c83f595764c6cfddf2e62e3c71a3e37aad5aba24c7863363d" name="procps-ng-debuginfo" arch="i686">
  <version epoch="0" ver="3.3.10" rel="26.el7_7.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-18" date="1515067200">- sysctl: empty value is now accepted
- Resolves: rhbz#1507356</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-19" date="1516017600">- top: locale independent float character in delay now accepted
- Resolves: rhbz#1182248</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-20" date="1516017601">- free: segfault when system memory exceeds petabytes
- Resolves: rhbz#1263765</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-21" date="1524139200">- ps: new format option LUID (LoginId)
- Resolves: rhbz#1518986</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-22" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-23" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-24" date="1551182400">- top: Do not default to the cwd in configs_read()
- Resolves: rhbz#1577023</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-25" date="1553688000">- ps: recognize SCHED_DEADLINE in CLS field, upstream backport
- Resolves: rhbz#1692843</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26" date="1555070400">- free: unreclaimable slabs counted into free memory, used mem incorrect
- Resolves: rhbz#1699264</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26.el7_7.1" date="1568635200">- top: segfault if killed by sigterm in batch mode
- Resolves: rhbz#1739372</changelog>
</package>
<package pkgid="3d0003ff1bdbd93e658b0cd9c958bf260050a23aa621b0c4ff5ccedfd9c2be23" name="procps-ng-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="26.el7_7.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-18" date="1515067200">- sysctl: empty value is now accepted
- Resolves: rhbz#1507356</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-19" date="1516017600">- top: locale independent float character in delay now accepted
- Resolves: rhbz#1182248</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-20" date="1516017601">- free: segfault when system memory exceeds petabytes
- Resolves: rhbz#1263765</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-21" date="1524139200">- ps: new format option LUID (LoginId)
- Resolves: rhbz#1518986</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-22" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-23" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-24" date="1551182400">- top: Do not default to the cwd in configs_read()
- Resolves: rhbz#1577023</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-25" date="1553688000">- ps: recognize SCHED_DEADLINE in CLS field, upstream backport
- Resolves: rhbz#1692843</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26" date="1555070400">- free: unreclaimable slabs counted into free memory, used mem incorrect
- Resolves: rhbz#1699264</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26.el7_7.1" date="1568635200">- top: segfault if killed by sigterm in batch mode
- Resolves: rhbz#1739372</changelog>
</package>
<package pkgid="53bf4d001d42570f988f6834a9ea7d8aea6a99f612f2095a4580d2d058b3dd3c" name="procps-ng-devel" arch="i686">
  <version epoch="0" ver="3.3.10" rel="26.el7_7.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-18" date="1515067200">- sysctl: empty value is now accepted
- Resolves: rhbz#1507356</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-19" date="1516017600">- top: locale independent float character in delay now accepted
- Resolves: rhbz#1182248</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-20" date="1516017601">- free: segfault when system memory exceeds petabytes
- Resolves: rhbz#1263765</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-21" date="1524139200">- ps: new format option LUID (LoginId)
- Resolves: rhbz#1518986</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-22" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-23" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-24" date="1551182400">- top: Do not default to the cwd in configs_read()
- Resolves: rhbz#1577023</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-25" date="1553688000">- ps: recognize SCHED_DEADLINE in CLS field, upstream backport
- Resolves: rhbz#1692843</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26" date="1555070400">- free: unreclaimable slabs counted into free memory, used mem incorrect
- Resolves: rhbz#1699264</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26.el7_7.1" date="1568635200">- top: segfault if killed by sigterm in batch mode
- Resolves: rhbz#1739372</changelog>
</package>
<package pkgid="33c72794ffa400bb68f47a7f73b744d2feb74c40447803833a4aebaeb671029c" name="procps-ng-devel" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="26.el7_7.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-18" date="1515067200">- sysctl: empty value is now accepted
- Resolves: rhbz#1507356</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-19" date="1516017600">- top: locale independent float character in delay now accepted
- Resolves: rhbz#1182248</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-20" date="1516017601">- free: segfault when system memory exceeds petabytes
- Resolves: rhbz#1263765</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-21" date="1524139200">- ps: new format option LUID (LoginId)
- Resolves: rhbz#1518986</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-22" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-23" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-24" date="1551182400">- top: Do not default to the cwd in configs_read()
- Resolves: rhbz#1577023</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-25" date="1553688000">- ps: recognize SCHED_DEADLINE in CLS field, upstream backport
- Resolves: rhbz#1692843</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26" date="1555070400">- free: unreclaimable slabs counted into free memory, used mem incorrect
- Resolves: rhbz#1699264</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26.el7_7.1" date="1568635200">- top: segfault if killed by sigterm in batch mode
- Resolves: rhbz#1739372</changelog>
</package>
<package pkgid="d4db0f687e1da155d786ab4b1572dee1865597e665aa4a4de49f4b1d31d9fdd9" name="procps-ng-i18n" arch="i686">
  <version epoch="0" ver="3.3.10" rel="26.el7_7.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-18" date="1515067200">- sysctl: empty value is now accepted
- Resolves: rhbz#1507356</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-19" date="1516017600">- top: locale independent float character in delay now accepted
- Resolves: rhbz#1182248</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-20" date="1516017601">- free: segfault when system memory exceeds petabytes
- Resolves: rhbz#1263765</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-21" date="1524139200">- ps: new format option LUID (LoginId)
- Resolves: rhbz#1518986</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-22" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-23" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-24" date="1551182400">- top: Do not default to the cwd in configs_read()
- Resolves: rhbz#1577023</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-25" date="1553688000">- ps: recognize SCHED_DEADLINE in CLS field, upstream backport
- Resolves: rhbz#1692843</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26" date="1555070400">- free: unreclaimable slabs counted into free memory, used mem incorrect
- Resolves: rhbz#1699264</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26.el7_7.1" date="1568635200">- top: segfault if killed by sigterm in batch mode
- Resolves: rhbz#1739372</changelog>
</package>
<package pkgid="1f9204d10ffb435d75d07a7909a74f5b5caa0f2c29009702989fe4d909baf3d2" name="procps-ng-i18n" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="26.el7_7.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-18" date="1515067200">- sysctl: empty value is now accepted
- Resolves: rhbz#1507356</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-19" date="1516017600">- top: locale independent float character in delay now accepted
- Resolves: rhbz#1182248</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-20" date="1516017601">- free: segfault when system memory exceeds petabytes
- Resolves: rhbz#1263765</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-21" date="1524139200">- ps: new format option LUID (LoginId)
- Resolves: rhbz#1518986</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-22" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-23" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-24" date="1551182400">- top: Do not default to the cwd in configs_read()
- Resolves: rhbz#1577023</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-25" date="1553688000">- ps: recognize SCHED_DEADLINE in CLS field, upstream backport
- Resolves: rhbz#1692843</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26" date="1555070400">- free: unreclaimable slabs counted into free memory, used mem incorrect
- Resolves: rhbz#1699264</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-26.el7_7.1" date="1568635200">- top: segfault if killed by sigterm in batch mode
- Resolves: rhbz#1739372</changelog>
</package>
<package pkgid="cdcad02654461bab7416d528125b2d60d42d72b8c3d5aac867cc3191ce28feeb" name="python-firewall" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-13" date="1512561600">- firewalld: also reload dbus config interface for global options
  (RHBZ#1514043)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
</package>
<package pkgid="d32fd4621c8c3b41955d4073903ed73d52dd7e69cc5a10c53b0010ffe2013f9d" name="python-firewall" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-13" date="1512561600">- firewalld: also reload dbus config interface for global options
  (RHBZ#1514043)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
</package>
<package pkgid="6ffd814323c101d22b22fbdacb188b1c73135f3725f4a2a13f54a19cd43df6d1" name="python-firewall" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
</package>
<package pkgid="0eae4017c620945d934cc3d8927eb737666315eab161eb9dbb7d704e5293ca73" name="python-firewall" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.4.4.4-14" date="1513080000">- services/high-availability: Add port 9929 (RHBZ#1486143)</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
</package>
<package pkgid="3727c8870e733c5841a9b43c5c3d2cc97f0e5a836569c63b6eae26684eef650b" name="python-firewall" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.3"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.3" date="1579176000">- fix: rich rule destination with services</changelog>
</package>
<package pkgid="8f4b082cae553b8e4d419dd7caa2ab0015e8a75acbb3352b621dc6d35379e81f" name="python-firewall" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.el7_7.3"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-1" date="1526385600">- rebase package to v0.5.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-2" date="1528804800">- backport patches for --check-config option</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-3" date="1532001600">- backport patches to avoid NM for generated connections</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-4" date="1534420800">- backport patches to enter failed state if startup fails</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.5.3-5" date="1534507200">- even if startup failed, reapply non-permanent interface to zone assignments</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-1" date="1542196800">- rebase package to v0.6.3, include recent stable fixes
- use QT4 patch for firewall-applet
- remove cockpit service definition, cockpit package still ships their own
- remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
- remove nftables support</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2" date="1552996800">- backport recent upstream stable fixes
- backport fix to enable IP forwarding only if toaddr specified</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.1" date="1566388800">- backport fix to allow disabling IPv6</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.2" date="1569844800">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-2.el7_7.3" date="1579176000">- fix: rich rule destination with services</changelog>
</package>
<package pkgid="7323cb6f4bc39c335f8dc0f2c591204ed271272b4a2a0940b41f8b2e7f5b1b5a" name="python-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="90ee711615833699e36030b16606a9028e9772633fbd49f9ef60fe909795b2a7" name="python-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="cb2fc567b18c110b81cc1896a0051e76fc08969dd786cd3cd49072cd9a8e076d" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="b5e194039f580d90146c5d9d79c88d8060c0afe4f6735afb6a4cc06d0d0752f3" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="de4136357debf586d621be740f18ec6c4f17acbb5cdad9ab415059c6262d8326" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="1d79213cc76f00a7a94fd225477b64999071c766bbbe8e84e72142cbd3cbcacc" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="fafadfb981a9f8d257ffd4ae2f89b827786a8044de7a56d7f563cb665a461252" name="python-pcp" arch="i686">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="212180db160bb6104b4a715f3b5ca74342092e3d33ab43f0670befaae25b5d38" name="python-pcp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="3.el7_7"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Mark Goodwin &lt;mgoodwin@redhat.com&gt; - 4.3.2-3" date="1566993600">- Fix memory leak in proc PMDA (BZ 1742051)</changelog>
</package>
<package pkgid="c94dee9ee3c56ba7c41c3fe2e74c672e04ff07d421e4a5d5c366635497c58bb4" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="1ab24df9e296abcd618b46498e84d66e63fc0b678090a7c59ae05e96c06bdc01" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="59370041392a315218879566b1bc580c7395e5f1e802e34b4eba6f932de69e5f" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="667ec3acd18647ce409300fc9b640c61e612a50ed0233b9efe383ec7c4f95318" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="5a70d26df0d64b3a4a31cb3f56eee1464ab9cc2bc9332355126809b43bcb138a" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="b73e9e38583f31e6790130583361f3cce2d0298397345a66ae0aa4732c071f22" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="e1b2c7a4053ebefbb82a5f5cd13c4eec73ae95b69ee8ebd938312e03b7db5da4" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="0864c89538ed6592fdb64fda6525d6be3859f01c05b26ce15bba885b27a4621b" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="d77b79560eecbb07b16c87f5c6c13003f27271c28e420bccdd86dc6b1a96cbd7" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="2d4837c5ca26d82d9667a3b7f0c60550f28dc26e7171b4925a2fc1d9c4ee2f0a" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="472ff4b7ea69a5ae9432078f93c944def30d4b9a87ef520b87a72c09575b507e" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="67ec2715dfb50011e1ad30e03d8902c2877c09aa47ed7e1c41c171bda3299226" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="cd51872898d9b785b803683b6855177d330e4d38b5dd5b63d6a6e373c9da1a00" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="5b0aef97e56e946b9fde6f96cc89fced47ebafba51aeb2ffda2fa0a7c7026b23" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="a00b2e8f71595e120318693a837b616a2b4b9aad7042806b8def9997da63959b" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.1.el7.centos.plus]" date="1568030400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="a41c88cb10de1e873b67f9eb4ac9549138361a051d69d90d70439b78e161e7a8" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1055.el7]" date="1559908800">- [thermal] intel_powerclamp: fix truncated kthread name (David Arcari) [1716946]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.1.el7" date="1567512000">- Apply debranding changes</changelog>
</package>
<package pkgid="1aa4190798dfd55514eafe0f99e283ae957a9c2c85a7a3454b93bba657d96bca" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.1.2.el7.centos.plus]" date="1568980800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]</changelog>
</package>
<package pkgid="5f2ccacd40843d565e231a39505b9ff6b48b96b82950972bc013cd946e47b69a" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.1.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1056.el7]" date="1560340800">- [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
- [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
- [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
- [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
- [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
- [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
- [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
- [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
- [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
- [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
- [vhost] log dirty page correctly (Jason Wang) [1657577]
- [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
- [vhost] reject zero size iova range (Jason Wang)
- [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
- [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
- [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
- [x86] mark AMD Rome processors supported (David Arcari) [1543509]
- [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1057.el7]" date="1560513600">- [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
- [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
- [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
- [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
- [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
- [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
- [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
- [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.2.el7]" date="1568635200">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.1.2.el7" date="1568980800">- Apply debranding changes</changelog>
</package>
<package pkgid="baaebae4ea854403358926b67a0359cc435cd5966629aff5419299631a8680e1" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.1.el7.centos.plus]" date="1571140800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="fd4d68d269892f0c2bd5a4217f5ae11e23662a64b203284302791cdeb5608f88" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1058.el7]" date="1561118400">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
- [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
- [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
- [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
- [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
- [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
- [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
- [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
- [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
- [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
- [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
- [kernel] mm: clean up non-standard page-&gt;_mapcount users (David Hildenbrand) [1718771]
- [kernel] mm: consolidate all page-flags helpers in &lt;linux/page-flags.h&gt; (David Hildenbrand) [1718771]
- [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
- [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
- [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
- [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
- [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
- [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
- [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
- [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
- [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
- [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
- [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
- [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
- [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
- [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
- [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
- [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
- [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
- [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
- [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
- [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
- [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
- [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
- [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
- [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
- [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.1.el7" date="1571140800">- Apply debranding changes</changelog>
</package>
<package pkgid="d2b6efc7e8f04ca2e407fa614feb7be2bf181ab583675d3e6f9433a8df8ba91f" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.2.el7.centos.plus]" date="1573560000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="6d5a5cf48d76a8551f5fdb2360b1f8e8c3534107702b7731bc790d32d245dcff" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1059.el7]" date="1561636800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
- [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
- [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
- [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
- [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
- [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
- [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
- [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
- [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
- [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
- [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
- [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.2.el7" date="1573560000">- Apply debranding changes</changelog>
</package>
<package pkgid="31601f6401e3982eae69e05e608675cf1008a78f8b5b00341c767d6db2d5e5ee" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.4.3.el7.centos.plus]" date="1573646400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="e5bf521754e92ee6d4aef7779f566a6059692f7c400323d2ff20ed2d1f59fb42" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.4.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1060.el7]" date="1561982400">- [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
- [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
- [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
- [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
- [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
- [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
- [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
- [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
- [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
- [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.2.el7]" date="1572955200">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.3.el7]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.4.3.el7" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="c43b3c2073c535963ee41b4a392d9d2669101dfa79745c6ac897611ed84e8d56" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.7.1.el7.centos.plus]" date="1574769600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="5555c6516c77ac7fe146a70924156bc0403e1ea36ab4a16ed2664bd0d3ad7d71" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.7.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1061.el7]" date="1562846400">- [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.el7]" date="1563451200">- [fs] revert "xfs: disable copy_file_range() to avoid broken splice copy" (Eric Sandeen) [1731205]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.7.1.el7" date="1574769600">- Apply debranding changes</changelog>
</package>
<package pkgid="ac108c71b085cee46007ee269029ddb08bf5b7de2e3e10ec35fba86a4be03458" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7.centos.plus"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1062.9.1.el7.centos.plus]" date="1575547200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   Apply a security fix [bug#16764]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch for acpi issue [bug#16315]
- Apply a patch to fix ICMP redirects [bug#16521]</changelog>
</package>
<package pkgid="cf07de3b6f6c1dcac3782b84651bbc61b0bef9df19cce1b0915a9142f5714b37" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1062.9.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.1.1.el7]" date="1565697600">- [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
- [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
- [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
- [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
- [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
- [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
- [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
- [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
- [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
- [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.2.1.el7]" date="1566475200">- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.3.1.el7]" date="1568635200">- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
- [block] block: blk_init_allocated_queue() set q-&gt;fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.4.1.el7]" date="1569412800">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.5.1.el7]" date="1570622400">- [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.6.1.el7]" date="1572436800">- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
- [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
- [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
- [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
- [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
- [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
- [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
- [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
- [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
- [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
- [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
- [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
- [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
- [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
- [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
- [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
- [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
- [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
- [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
- [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
- [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
- [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
- [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
- [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
- [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
- [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
- [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
- [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.7.1.el7]" date="1573646400">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
- [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
- [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
- [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
- [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
- [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
- [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
- [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
- [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
- [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
- [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
- [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
- [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
- [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
- [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
- [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
- [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
- [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
- [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
- [kernel] sched: Move rq-&gt;idle_stamp up to the core (Phil Auld) [1756265 1722234]
- [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
- [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-1062.8.1.el7]" date="1573732800">- [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-1062.9.1.el7]" date="1575288000">- [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-1062.9.1.el7" date="1575547200">- Apply debranding changes</changelog>
</package>
<package pkgid="1430fc456a7d28a3f13c1b633d7e81399e39bf83206c8e84c628ce5e3abe1567" name="python-reportlab" arch="i686">
  <version epoch="0" ver="2.5" rel="9.el7_7.1"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.3-3" date="1279800000">- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild</changelog>
  <changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 2.5-2" date="1294315200">- Update to version 2.5 of reportlab.
- Remove tabs in specfile.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-3" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-5" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Toshio Kuratomi &lt;toshio@fedoraproject.org&gt; - 2.5-6" date="1358337600">- Add a dep on python-imaging to process images</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.5-9.el7_7.1" date="1579003200">- Do not eval strings passed to toColor
- Resolves: #1788552</changelog>
</package>
<package pkgid="d4603671bddf8207873d127450aef00ca016b9104cf3ddc65c61069352dcbf2b" name="python-reportlab" arch="src">
  <version epoch="0" ver="2.5" rel="9.el7_7.1"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.3-3" date="1279800000">- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild</changelog>
  <changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 2.5-2" date="1294315200">- Update to version 2.5 of reportlab.
- Remove tabs in specfile.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-3" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-5" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Toshio Kuratomi &lt;toshio@fedoraproject.org&gt; - 2.5-6" date="1358337600">- Add a dep on python-imaging to process images</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.5-9.el7_7.1" date="1579003200">- Do not eval strings passed to toColor
- Resolves: #1788552</changelog>
</package>
<package pkgid="7f44637b3a788a933e396e605bfc72d1329991ad248837b459e321eccd4334db" name="python-reportlab" arch="src">
  <version epoch="0" ver="2.5" rel="9.el7_7.1"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.3-3" date="1279800000">- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild</changelog>
  <changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 2.5-2" date="1294315200">- Update to version 2.5 of reportlab.
- Remove tabs in specfile.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-3" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-5" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Toshio Kuratomi &lt;toshio@fedoraproject.org&gt; - 2.5-6" date="1358337600">- Add a dep on python-imaging to process images</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.5-9.el7_7.1" date="1579003200">- Do not eval strings passed to toColor
- Resolves: #1788552</changelog>
</package>
<package pkgid="62ff1f56556c7e091e5649a878e2d18c3e589d89ac82d2c4ee59374717edb11b" name="python-reportlab" arch="x86_64">
  <version epoch="0" ver="2.5" rel="9.el7_7.1"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.3-3" date="1279800000">- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild</changelog>
  <changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 2.5-2" date="1294315200">- Update to version 2.5 of reportlab.
- Remove tabs in specfile.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-3" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-5" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Toshio Kuratomi &lt;toshio@fedoraproject.org&gt; - 2.5-6" date="1358337600">- Add a dep on python-imaging to process images</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.5-9.el7_7.1" date="1579003200">- Do not eval strings passed to toColor
- Resolves: #1788552</changelog>
</package>
<package pkgid="ec9a3cbfa59525d0e64dbdc35006c599efa3b8df3c65ec47f5303150e7c20763" name="python-reportlab-debuginfo" arch="i686">
  <version epoch="0" ver="2.5" rel="9.el7_7.1"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.3-3" date="1279800000">- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild</changelog>
  <changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 2.5-2" date="1294315200">- Update to version 2.5 of reportlab.
- Remove tabs in specfile.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-3" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-5" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Toshio Kuratomi &lt;toshio@fedoraproject.org&gt; - 2.5-6" date="1358337600">- Add a dep on python-imaging to process images</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.5-9.el7_7.1" date="1579003200">- Do not eval strings passed to toColor
- Resolves: #1788552</changelog>
</package>
<package pkgid="3725d225b719220630238b48b127e6470ff2780355f7d2cdae1c0736b2e7b714" name="python-reportlab-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5" rel="9.el7_7.1"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.3-3" date="1279800000">- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild</changelog>
  <changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 2.5-2" date="1294315200">- Update to version 2.5 of reportlab.
- Remove tabs in specfile.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-3" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-5" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Toshio Kuratomi &lt;toshio@fedoraproject.org&gt; - 2.5-6" date="1358337600">- Add a dep on python-imaging to process images</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.5-9.el7_7.1" date="1579003200">- Do not eval strings passed to toColor
- Resolves: #1788552</changelog>
</package>
<package pkgid="0ac7b6c60af4d2027af76a3abcf63b933c59eac35f82e996d670888c3d9e0d4e" name="python-reportlab-docs" arch="i686">
  <version epoch="0" ver="2.5" rel="9.el7_7.1"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.3-3" date="1279800000">- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild</changelog>
  <changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 2.5-2" date="1294315200">- Update to version 2.5 of reportlab.
- Remove tabs in specfile.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-3" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-5" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Toshio Kuratomi &lt;toshio@fedoraproject.org&gt; - 2.5-6" date="1358337600">- Add a dep on python-imaging to process images</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.5-9.el7_7.1" date="1579003200">- Do not eval strings passed to toColor
- Resolves: #1788552</changelog>
</package>
<package pkgid="65687d62ea5312d4c433368725d7d096d78a62e2e9f41cc72867488ae259b038" name="python-reportlab-docs" arch="x86_64">
  <version epoch="0" ver="2.5" rel="9.el7_7.1"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.3-3" date="1279800000">- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild</changelog>
  <changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 2.5-2" date="1294315200">- Update to version 2.5 of reportlab.
- Remove tabs in specfile.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-3" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-5" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Toshio Kuratomi &lt;toshio@fedoraproject.org&gt; - 2.5-6" date="1358337600">- Add a dep on python-imaging to process images</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.5-9.el7_7.1" date="1579003200">- Do not eval strings passed to toColor
- Resolves: #1788552</changelog>
</package>
<package pkgid="b8489350a28132abc623e67b0e522387b9cebcf8a6de2e8dc5a15dc6c74b2029" name="python-requests" arch="noarch">
  <version epoch="0" ver="2.6.0" rel="7.el7_7"/>
  <changelog author="Ralph Bean &lt;rbean@redhat.com&gt; - 1.1.0-4" date="1370952000">- Correct a rhel conditional on python-ordereddict</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-5" date="1371556800">- Fixed bogus date in changelog entry.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-6" date="1380888000">- Removed bundled packages.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-8" date="1390824000">- Removed authentication header on redirect.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-9" date="1421064000">- Merged headers with different cases.</changelog>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.0-1" date="1433332800">- Update to 2.6.0
Resolves: rhbz#1214365</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-5" date="1543233600">- Fix CVE-2018-18074
Resolves: rhbz#1647368</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-6" date="1566907200">- Fix handling of default ports in auth stripping
Resolves: rhbz#1754830</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.6.0-7" date="1570104000">- Modify tests to run in pytest
- Add a bcond online_tests to enable the tests
Related: rhbz#1754830</changelog>
</package>
<package pkgid="813ac7f23ef2e15815e217f4d76145684238e2fdeee23c0aceb5660150fbe4e3" name="python-requests" arch="noarch">
  <version epoch="0" ver="2.6.0" rel="7.el7_7"/>
  <changelog author="Ralph Bean &lt;rbean@redhat.com&gt; - 1.1.0-4" date="1370952000">- Correct a rhel conditional on python-ordereddict</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-5" date="1371556800">- Fixed bogus date in changelog entry.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-6" date="1380888000">- Removed bundled packages.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-8" date="1390824000">- Removed authentication header on redirect.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-9" date="1421064000">- Merged headers with different cases.</changelog>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.0-1" date="1433332800">- Update to 2.6.0
Resolves: rhbz#1214365</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-5" date="1543233600">- Fix CVE-2018-18074
Resolves: rhbz#1647368</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-6" date="1566907200">- Fix handling of default ports in auth stripping
Resolves: rhbz#1754830</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.6.0-7" date="1570104000">- Modify tests to run in pytest
- Add a bcond online_tests to enable the tests
Related: rhbz#1754830</changelog>
</package>
<package pkgid="597964982f62ef502f98ac83d798923abf81163d4026d6074b3a37fa5d0b2021" name="python-requests" arch="src">
  <version epoch="0" ver="2.6.0" rel="7.el7_7"/>
  <changelog author="Ralph Bean &lt;rbean@redhat.com&gt; - 1.1.0-4" date="1370952000">- Correct a rhel conditional on python-ordereddict</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-5" date="1371556800">- Fixed bogus date in changelog entry.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-6" date="1380888000">- Removed bundled packages.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-8" date="1390824000">- Removed authentication header on redirect.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-9" date="1421064000">- Merged headers with different cases.</changelog>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.0-1" date="1433332800">- Update to 2.6.0
Resolves: rhbz#1214365</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-5" date="1543233600">- Fix CVE-2018-18074
Resolves: rhbz#1647368</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-6" date="1566907200">- Fix handling of default ports in auth stripping
Resolves: rhbz#1754830</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.6.0-7" date="1570104000">- Modify tests to run in pytest
- Add a bcond online_tests to enable the tests
Related: rhbz#1754830</changelog>
</package>
<package pkgid="834eb532992cc068a7a2b5c12cff7c0fc36e97a5fdf0a4ebbc2a14bea6e51998" name="python-requests" arch="src">
  <version epoch="0" ver="2.6.0" rel="7.el7_7"/>
  <changelog author="Ralph Bean &lt;rbean@redhat.com&gt; - 1.1.0-4" date="1370952000">- Correct a rhel conditional on python-ordereddict</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-5" date="1371556800">- Fixed bogus date in changelog entry.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-6" date="1380888000">- Removed bundled packages.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-8" date="1390824000">- Removed authentication header on redirect.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-9" date="1421064000">- Merged headers with different cases.</changelog>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.0-1" date="1433332800">- Update to 2.6.0
Resolves: rhbz#1214365</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-5" date="1543233600">- Fix CVE-2018-18074
Resolves: rhbz#1647368</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-6" date="1566907200">- Fix handling of default ports in auth stripping
Resolves: rhbz#1754830</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.6.0-7" date="1570104000">- Modify tests to run in pytest
- Add a bcond online_tests to enable the tests
Related: rhbz#1754830</changelog>
</package>
<package pkgid="04e4a2852a6825ec8b25e191d7ce6732bf2fe0e4659e1d906620c03a169a4e61" name="python-requests" arch="noarch">
  <version epoch="0" ver="2.6.0" rel="8.el7_7"/>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-5" date="1371556800">- Fixed bogus date in changelog entry.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-6" date="1380888000">- Removed bundled packages.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-8" date="1390824000">- Removed authentication header on redirect.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-9" date="1421064000">- Merged headers with different cases.</changelog>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.0-1" date="1433332800">- Update to 2.6.0
Resolves: rhbz#1214365</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-5" date="1543233600">- Fix CVE-2018-18074
Resolves: rhbz#1647368</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-6" date="1566907200">- Fix handling of default ports in auth stripping
Resolves: rhbz#1754830</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.6.0-7" date="1570104000">- Modify tests to run in pytest
- Add a bcond online_tests to enable the tests
Related: rhbz#1754830</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-8" date="1571918400">- Import urllib3 and chardet from the global namespace
Resolves: rhbz#1776294</changelog>
</package>
<package pkgid="76999aba0ab7c4c0e9420b2947c5c26ee333d1b50631d214937c4298508a7723" name="python-requests" arch="noarch">
  <version epoch="0" ver="2.6.0" rel="8.el7_7"/>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-5" date="1371556800">- Fixed bogus date in changelog entry.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-6" date="1380888000">- Removed bundled packages.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-8" date="1390824000">- Removed authentication header on redirect.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-9" date="1421064000">- Merged headers with different cases.</changelog>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.0-1" date="1433332800">- Update to 2.6.0
Resolves: rhbz#1214365</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-5" date="1543233600">- Fix CVE-2018-18074
Resolves: rhbz#1647368</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-6" date="1566907200">- Fix handling of default ports in auth stripping
Resolves: rhbz#1754830</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.6.0-7" date="1570104000">- Modify tests to run in pytest
- Add a bcond online_tests to enable the tests
Related: rhbz#1754830</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-8" date="1571918400">- Import urllib3 and chardet from the global namespace
Resolves: rhbz#1776294</changelog>
</package>
<package pkgid="1f883224f57444d76539350461c4f1c53ff65b19f3880c680fbe203a68437493" name="python-requests" arch="src">
  <version epoch="0" ver="2.6.0" rel="8.el7_7"/>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-5" date="1371556800">- Fixed bogus date in changelog entry.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-6" date="1380888000">- Removed bundled packages.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-8" date="1390824000">- Removed authentication header on redirect.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-9" date="1421064000">- Merged headers with different cases.</changelog>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.0-1" date="1433332800">- Update to 2.6.0
Resolves: rhbz#1214365</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-5" date="1543233600">- Fix CVE-2018-18074
Resolves: rhbz#1647368</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-6" date="1566907200">- Fix handling of default ports in auth stripping
Resolves: rhbz#1754830</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.6.0-7" date="1570104000">- Modify tests to run in pytest
- Add a bcond online_tests to enable the tests
Related: rhbz#1754830</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-8" date="1571918400">- Import urllib3 and chardet from the global namespace
Resolves: rhbz#1776294</changelog>
</package>
<package pkgid="6ea52e0d0f2ada8eef3940662380169de29374e9bd6f8e29898b827ade43499f" name="python-requests" arch="src">
  <version epoch="0" ver="2.6.0" rel="8.el7_7"/>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-5" date="1371556800">- Fixed bogus date in changelog entry.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-6" date="1380888000">- Removed bundled packages.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-8" date="1390824000">- Removed authentication header on redirect.</changelog>
  <changelog author="Endi S. Dewata &lt;edewata@redhat.com&gt; - 1.1.0-9" date="1421064000">- Merged headers with different cases.</changelog>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.0-1" date="1433332800">- Update to 2.6.0
Resolves: rhbz#1214365</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-5" date="1543233600">- Fix CVE-2018-18074
Resolves: rhbz#1647368</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-6" date="1566907200">- Fix handling of default ports in auth stripping
Resolves: rhbz#1754830</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.6.0-7" date="1570104000">- Modify tests to run in pytest
- Add a bcond online_tests to enable the tests
Related: rhbz#1754830</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-8" date="1571918400">- Import urllib3 and chardet from the global namespace
Resolves: rhbz#1776294</changelog>
</package>
<package pkgid="826d66486ae00a0060ce940a56153b78df7f3ad56709374f7aa0d5e20e956ab7" name="python-sss" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="06a76b6d324a5c56a174e84f8fbffcca4d6f9665ce7ac690705c78b2f27b82f4" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="3822444f7bf5ebc82326e4df4df295f4f0bf9a413a615de96e4b8f01da4b761e" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="6cecf54bab58893087d017c0c377718f5ae8a1b1de71b55d369b38b9f4738536" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="916f3799721d3ea6f93ef5aa9fbe810af074fb1d163e29b804cae363b361c2d0" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="16770b3fb5699f8f0a8fb322f63c47864b33f2f5dbeaccd7f2e1686f82b8e14e" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="7b141aab432773e13b6f9a57ac4738df900cf03783f7ef02955c0482d34706f0" name="python-syspurpose" arch="i686">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="5f4ae3a86a0b47f7a9eb706517eaabb9fbdc42ca215faa56e4d1f46cd9f5c445" name="python-syspurpose" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="a2f3609f346acc3c6ed671cc90678b6d7cdd6de45e4963ffde8a4fd7aaaae7e5" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="39e8b1764be5692454b5e6f45287579402c9a8f9e5042f6d0f4fb4103685af27" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="31e0ee4f14f76bfe8bb47d595cc9f75f6e23275f00fb634be086bedc5e073d71" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="888ef02ed501c5bd0429e65a20add7738297ca1a05b34cf80750be39547897b0" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="835dd546fd4929eaf9c31d2648a6cc59fec6c0c4b85cef94dbd1e9b0a69ae86c" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="076e0ba849caeb6d492c6636b5b51eaa1629284812026c2e16cd61d21da23187" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.5" rel="11.el7.centos.3"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-5.el7" date="1554724800">- Resolves: 1697242 Communication with oddjob helper fails
  - Bypass D-BUS interface definition deficiences for trust-fetch-domains</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-6.el7" date="1555675200">- Resolves: 1700804 - Update Red Hat logo in IdM Server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-7.el7" date="1556625600">- Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
  - ipactl restart: fix wrong logic when checking service list</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-8.el7" date="1557748800">- Resolves: 1702651 - Command ipa conole is broken
  - ipa console: catch proper exception when history file can not be open
- Resolves: 1704796 - Wrong CA replication topology created with two replicas
  - replica install: acknowledge ca_host override
- Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
  - upgrade: adtrust - catch empty result when retrieving list of trusts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-9.el7" date="1559649600">- Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-10.el7" date="1561550400">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7" date="1561723200">- Resolves: 1723473 - ipa upgrade fails with trust entry already exists
  - adtrust upgrade: fix wrong primary principal name, part 2
- Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
  - trust-fetch-domains: make sure we use right KDC when --server is specified</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.2" date="1568721600">- Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
  - add default access control when migrating trust objects
  - adtrust: add default read_keys permission for TDO objects
  - Disable deprecated-lambda check in adtrust upgrade code</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.5-11.el7_7.3" date="1569844800">- Resolves: #1756914 - Sub-CA key replication failure
  - Handle missing LWCA certificate or chain
  - Fix CustodiaClient ccache handling
  - CustodiaClient: use ldapi when ldap_uri not specified
  - CustodiaClient: fix IPASecStore config on ipa-4-7
  - Bump krb5 min version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.5-11.el7.centos.3" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ec4963bfd9ab24a8d44fde4a7e9064ba71cdbedc665c2de24184e4266d8b132d" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="167.el7_7.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-159.el7" date="1533124800">- kvm-multiboot-bss_end_addr-can-be-zero.patch [bz#1549822]
- kvm-multiboot-Remove-unused-variables-from-multiboot.c.patch [bz#1549822]
- kvm-multiboot-Use-header-names-when-displaying-fields.patch [bz#1549822]
- kvm-multiboot-fprintf-stderr.-error_report.patch [bz#1549822]
- kvm-multiboot-Reject-kernels-exceeding-the-address-space.patch [bz#1549822]
- kvm-multiboot-Check-validity-of-mh_header_addr.patch [bz#1549822]
- kvm-slirp-remove-mbuf-m_hdr-m_dat-indirection.patch [bz#1586253]
- kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586253]
- Resolves: bz#1549822
  (CVE-2018-7550 qemu-kvm: Qemu: i386:  multiboot OOB access while loading kernel image [rhel-7.6])
- Resolves: bz#1586253
  (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-160.el7" date="1534766400">- kvm-scsi-disk-support-reporting-of-rotation-rate.patch [bz#1583807]
- kvm-ide-support-reporting-of-rotation-rate.patch [bz#1583807]
- kvm-ide-avoid-referencing-NULL-dev-in-rotational-rate-se.patch [bz#1583807]
- kvm-slirp-Correct-size-check-in-m_inc.patch [bz#1586253]
- Resolves: bz#1583807
  ([DELL EMC 7.6 FEAT] option to mark virtual block device as rotational/non-rotational)
- Resolves: bz#1586253
  (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-161.el7" date="1546430400">- kvm-Inhibit-ballooning-during-postcopy.patch [bz#1659229]
- kvm-balloon-Allow-multiple-inhibit-users.patch [bz#1659229]
- kvm-check-KVM_CAP_SYNC_MMU-with-kvm_vm_check_extensi.patch [bz#1659229]
- kvm-Use-inhibit-to-prevent-ballooning-without-synchr.patch [bz#1659229]
- kvm-vfio-Inhibit-ballooning-based-on-group-attachment-to.patch [bz#1659229]
- Resolves: bz#1659229
  (Ballooning is incompatible with vfio assigned devices, but not prevented)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-162.el7" date="1547467200">- kvm-i386-Deprecate-arch-facilities-and-make-it-block-liv.patch [bz#1658407]
- kvm-Do-not-build-bluetooth-support.patch [bz#1654627]
- Resolves: bz#1654627
  (Qemu: hw: bt: keep bt/* objects from building [rhel-7.7])
- Resolves: bz#1658407
  (mode="host-model" VMs include broken "arch-facilities" flag name [qemu-kvm])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-163.el7" date="1554292800">- kvm-x86-cpu-Enable-CLDEMOTE-Demote-Cache-Line-cpu-featur.patch [bz#1537773]
- kvm-vfio-pci-Lazy-PBA-emulation.patch [bz#1459077]
- kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1689791]
- Resolves: bz#1459077
  ([Intel 7.7 Bug] QEMU version in RHEL7.4 beta does not support KVM passthrough with WFR card)
- Resolves: bz#1537773
  ([Intel 7.7 Feat] KVM Enabling SnowRidge new NIs - qemu-kvm)
- Resolves: bz#1689791
  (CVE-2019-9824 qemu-kvm: QEMU: Slirp: information leakage in tcp_emu() due to uninitialized stack variables [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-164.el7" date="1554897600">- kvm-target-i386-define-md-clear-bit-rhel.patch [bz#1693217]
- Resolves: bz#1693217
  (CVE-2018-12126 qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling [rhel-7.7] )</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-165.el7" date="1559044800">- kvm-Fix-eax-for-cpuid-leaf-0x40000000.patch [bz#1709495]
- kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1669068]
- kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1669068]
- kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1669068]
- Resolves: bz#1669068
  (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-7.7])
- Resolves: bz#1709495
  (Change CPUID[0x40000000].EAX from 0 to KVM_CPUID_FE...ATURES (0x40000001))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-166.el7" date="1559736000">- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-167.el7" date="1560340800">- Reverting kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-167.el7_7.1" date="1565611200">- kvm-qxl-check-release-info-object.patch [bz#1732337]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734748]
- Resolves: bz#1732337
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7] [rhel-7.7.z])
- Resolves: bz#1734748
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.7.z])</changelog>
</package>
<package pkgid="092b10bb86d4f3923c49bdf69d8c8131a04b8a6d0dc76b7890f99d322e071ac1" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="167.el7_7.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-159.el7" date="1533124800">- kvm-multiboot-bss_end_addr-can-be-zero.patch [bz#1549822]
- kvm-multiboot-Remove-unused-variables-from-multiboot.c.patch [bz#1549822]
- kvm-multiboot-Use-header-names-when-displaying-fields.patch [bz#1549822]
- kvm-multiboot-fprintf-stderr.-error_report.patch [bz#1549822]
- kvm-multiboot-Reject-kernels-exceeding-the-address-space.patch [bz#1549822]
- kvm-multiboot-Check-validity-of-mh_header_addr.patch [bz#1549822]
- kvm-slirp-remove-mbuf-m_hdr-m_dat-indirection.patch [bz#1586253]
- kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586253]
- Resolves: bz#1549822
  (CVE-2018-7550 qemu-kvm: Qemu: i386:  multiboot OOB access while loading kernel image [rhel-7.6])
- Resolves: bz#1586253
  (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-160.el7" date="1534766400">- kvm-scsi-disk-support-reporting-of-rotation-rate.patch [bz#1583807]
- kvm-ide-support-reporting-of-rotation-rate.patch [bz#1583807]
- kvm-ide-avoid-referencing-NULL-dev-in-rotational-rate-se.patch [bz#1583807]
- kvm-slirp-Correct-size-check-in-m_inc.patch [bz#1586253]
- Resolves: bz#1583807
  ([DELL EMC 7.6 FEAT] option to mark virtual block device as rotational/non-rotational)
- Resolves: bz#1586253
  (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-161.el7" date="1546430400">- kvm-Inhibit-ballooning-during-postcopy.patch [bz#1659229]
- kvm-balloon-Allow-multiple-inhibit-users.patch [bz#1659229]
- kvm-check-KVM_CAP_SYNC_MMU-with-kvm_vm_check_extensi.patch [bz#1659229]
- kvm-Use-inhibit-to-prevent-ballooning-without-synchr.patch [bz#1659229]
- kvm-vfio-Inhibit-ballooning-based-on-group-attachment-to.patch [bz#1659229]
- Resolves: bz#1659229
  (Ballooning is incompatible with vfio assigned devices, but not prevented)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-162.el7" date="1547467200">- kvm-i386-Deprecate-arch-facilities-and-make-it-block-liv.patch [bz#1658407]
- kvm-Do-not-build-bluetooth-support.patch [bz#1654627]
- Resolves: bz#1654627
  (Qemu: hw: bt: keep bt/* objects from building [rhel-7.7])
- Resolves: bz#1658407
  (mode="host-model" VMs include broken "arch-facilities" flag name [qemu-kvm])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-163.el7" date="1554292800">- kvm-x86-cpu-Enable-CLDEMOTE-Demote-Cache-Line-cpu-featur.patch [bz#1537773]
- kvm-vfio-pci-Lazy-PBA-emulation.patch [bz#1459077]
- kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1689791]
- Resolves: bz#1459077
  ([Intel 7.7 Bug] QEMU version in RHEL7.4 beta does not support KVM passthrough with WFR card)
- Resolves: bz#1537773
  ([Intel 7.7 Feat] KVM Enabling SnowRidge new NIs - qemu-kvm)
- Resolves: bz#1689791
  (CVE-2019-9824 qemu-kvm: QEMU: Slirp: information leakage in tcp_emu() due to uninitialized stack variables [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-164.el7" date="1554897600">- kvm-target-i386-define-md-clear-bit-rhel.patch [bz#1693217]
- Resolves: bz#1693217
  (CVE-2018-12126 qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling [rhel-7.7] )</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-165.el7" date="1559044800">- kvm-Fix-eax-for-cpuid-leaf-0x40000000.patch [bz#1709495]
- kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1669068]
- kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1669068]
- kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1669068]
- Resolves: bz#1669068
  (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-7.7])
- Resolves: bz#1709495
  (Change CPUID[0x40000000].EAX from 0 to KVM_CPUID_FE...ATURES (0x40000001))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-166.el7" date="1559736000">- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-167.el7" date="1560340800">- Reverting kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-167.el7_7.1" date="1565611200">- kvm-qxl-check-release-info-object.patch [bz#1732337]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734748]
- Resolves: bz#1732337
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7] [rhel-7.7.z])
- Resolves: bz#1734748
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.7.z])</changelog>
</package>
<package pkgid="a2510fb51972aadedeb4f23116e16c6c881e51793e12ffb08e8e3c590dc5fac6" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="167.el7_7.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-159.el7" date="1533124800">- kvm-multiboot-bss_end_addr-can-be-zero.patch [bz#1549822]
- kvm-multiboot-Remove-unused-variables-from-multiboot.c.patch [bz#1549822]
- kvm-multiboot-Use-header-names-when-displaying-fields.patch [bz#1549822]
- kvm-multiboot-fprintf-stderr.-error_report.patch [bz#1549822]
- kvm-multiboot-Reject-kernels-exceeding-the-address-space.patch [bz#1549822]
- kvm-multiboot-Check-validity-of-mh_header_addr.patch [bz#1549822]
- kvm-slirp-remove-mbuf-m_hdr-m_dat-indirection.patch [bz#1586253]
- kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586253]
- Resolves: bz#1549822
  (CVE-2018-7550 qemu-kvm: Qemu: i386:  multiboot OOB access while loading kernel image [rhel-7.6])
- Resolves: bz#1586253
  (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-160.el7" date="1534766400">- kvm-scsi-disk-support-reporting-of-rotation-rate.patch [bz#1583807]
- kvm-ide-support-reporting-of-rotation-rate.patch [bz#1583807]
- kvm-ide-avoid-referencing-NULL-dev-in-rotational-rate-se.patch [bz#1583807]
- kvm-slirp-Correct-size-check-in-m_inc.patch [bz#1586253]
- Resolves: bz#1583807
  ([DELL EMC 7.6 FEAT] option to mark virtual block device as rotational/non-rotational)
- Resolves: bz#1586253
  (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-161.el7" date="1546430400">- kvm-Inhibit-ballooning-during-postcopy.patch [bz#1659229]
- kvm-balloon-Allow-multiple-inhibit-users.patch [bz#1659229]
- kvm-check-KVM_CAP_SYNC_MMU-with-kvm_vm_check_extensi.patch [bz#1659229]
- kvm-Use-inhibit-to-prevent-ballooning-without-synchr.patch [bz#1659229]
- kvm-vfio-Inhibit-ballooning-based-on-group-attachment-to.patch [bz#1659229]
- Resolves: bz#1659229
  (Ballooning is incompatible with vfio assigned devices, but not prevented)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-162.el7" date="1547467200">- kvm-i386-Deprecate-arch-facilities-and-make-it-block-liv.patch [bz#1658407]
- kvm-Do-not-build-bluetooth-support.patch [bz#1654627]
- Resolves: bz#1654627
  (Qemu: hw: bt: keep bt/* objects from building [rhel-7.7])
- Resolves: bz#1658407
  (mode="host-model" VMs include broken "arch-facilities" flag name [qemu-kvm])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-163.el7" date="1554292800">- kvm-x86-cpu-Enable-CLDEMOTE-Demote-Cache-Line-cpu-featur.patch [bz#1537773]
- kvm-vfio-pci-Lazy-PBA-emulation.patch [bz#1459077]
- kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1689791]
- Resolves: bz#1459077
  ([Intel 7.7 Bug] QEMU version in RHEL7.4 beta does not support KVM passthrough with WFR card)
- Resolves: bz#1537773
  ([Intel 7.7 Feat] KVM Enabling SnowRidge new NIs - qemu-kvm)
- Resolves: bz#1689791
  (CVE-2019-9824 qemu-kvm: QEMU: Slirp: information leakage in tcp_emu() due to uninitialized stack variables [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-164.el7" date="1554897600">- kvm-target-i386-define-md-clear-bit-rhel.patch [bz#1693217]
- Resolves: bz#1693217
  (CVE-2018-12126 qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling [rhel-7.7] )</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-165.el7" date="1559044800">- kvm-Fix-eax-for-cpuid-leaf-0x40000000.patch [bz#1709495]
- kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1669068]
- kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1669068]
- kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1669068]
- Resolves: bz#1669068
  (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-7.7])
- Resolves: bz#1709495
  (Change CPUID[0x40000000].EAX from 0 to KVM_CPUID_FE...ATURES (0x40000001))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-166.el7" date="1559736000">- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-167.el7" date="1560340800">- Reverting kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-167.el7_7.1" date="1565611200">- kvm-qxl-check-release-info-object.patch [bz#1732337]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734748]
- Resolves: bz#1732337
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7] [rhel-7.7.z])
- Resolves: bz#1734748
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.7.z])</changelog>
</package>
<package pkgid="6109d468c04c7aebb3ddbc5d3095b2060b0c4877a86d7103a84e0bb40e2add42" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="167.el7_7.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-159.el7" date="1533124800">- kvm-multiboot-bss_end_addr-can-be-zero.patch [bz#1549822]
- kvm-multiboot-Remove-unused-variables-from-multiboot.c.patch [bz#1549822]
- kvm-multiboot-Use-header-names-when-displaying-fields.patch [bz#1549822]
- kvm-multiboot-fprintf-stderr.-error_report.patch [bz#1549822]
- kvm-multiboot-Reject-kernels-exceeding-the-address-space.patch [bz#1549822]
- kvm-multiboot-Check-validity-of-mh_header_addr.patch [bz#1549822]
- kvm-slirp-remove-mbuf-m_hdr-m_dat-indirection.patch [bz#1586253]
- kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586253]
- Resolves: bz#1549822
  (CVE-2018-7550 qemu-kvm: Qemu: i386:  multiboot OOB access while loading kernel image [rhel-7.6])
- Resolves: bz#1586253
  (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-160.el7" date="1534766400">- kvm-scsi-disk-support-reporting-of-rotation-rate.patch [bz#1583807]
- kvm-ide-support-reporting-of-rotation-rate.patch [bz#1583807]
- kvm-ide-avoid-referencing-NULL-dev-in-rotational-rate-se.patch [bz#1583807]
- kvm-slirp-Correct-size-check-in-m_inc.patch [bz#1586253]
- Resolves: bz#1583807
  ([DELL EMC 7.6 FEAT] option to mark virtual block device as rotational/non-rotational)
- Resolves: bz#1586253
  (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-161.el7" date="1546430400">- kvm-Inhibit-ballooning-during-postcopy.patch [bz#1659229]
- kvm-balloon-Allow-multiple-inhibit-users.patch [bz#1659229]
- kvm-check-KVM_CAP_SYNC_MMU-with-kvm_vm_check_extensi.patch [bz#1659229]
- kvm-Use-inhibit-to-prevent-ballooning-without-synchr.patch [bz#1659229]
- kvm-vfio-Inhibit-ballooning-based-on-group-attachment-to.patch [bz#1659229]
- Resolves: bz#1659229
  (Ballooning is incompatible with vfio assigned devices, but not prevented)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-162.el7" date="1547467200">- kvm-i386-Deprecate-arch-facilities-and-make-it-block-liv.patch [bz#1658407]
- kvm-Do-not-build-bluetooth-support.patch [bz#1654627]
- Resolves: bz#1654627
  (Qemu: hw: bt: keep bt/* objects from building [rhel-7.7])
- Resolves: bz#1658407
  (mode="host-model" VMs include broken "arch-facilities" flag name [qemu-kvm])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-163.el7" date="1554292800">- kvm-x86-cpu-Enable-CLDEMOTE-Demote-Cache-Line-cpu-featur.patch [bz#1537773]
- kvm-vfio-pci-Lazy-PBA-emulation.patch [bz#1459077]
- kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1689791]
- Resolves: bz#1459077
  ([Intel 7.7 Bug] QEMU version in RHEL7.4 beta does not support KVM passthrough with WFR card)
- Resolves: bz#1537773
  ([Intel 7.7 Feat] KVM Enabling SnowRidge new NIs - qemu-kvm)
- Resolves: bz#1689791
  (CVE-2019-9824 qemu-kvm: QEMU: Slirp: information leakage in tcp_emu() due to uninitialized stack variables [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-164.el7" date="1554897600">- kvm-target-i386-define-md-clear-bit-rhel.patch [bz#1693217]
- Resolves: bz#1693217
  (CVE-2018-12126 qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling [rhel-7.7] )</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-165.el7" date="1559044800">- kvm-Fix-eax-for-cpuid-leaf-0x40000000.patch [bz#1709495]
- kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1669068]
- kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1669068]
- kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1669068]
- Resolves: bz#1669068
  (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-7.7])
- Resolves: bz#1709495
  (Change CPUID[0x40000000].EAX from 0 to KVM_CPUID_FE...ATURES (0x40000001))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-166.el7" date="1559736000">- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-167.el7" date="1560340800">- Reverting kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-167.el7_7.1" date="1565611200">- kvm-qxl-check-release-info-object.patch [bz#1732337]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734748]
- Resolves: bz#1732337
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7] [rhel-7.7.z])
- Resolves: bz#1734748
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.7.z])</changelog>
</package>
<package pkgid="8d06d4d2e3d2692b8dc0cc0b3659619cd7de2a4c0249db486837f0ae690ee06f" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="167.el7_7.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-159.el7" date="1533124800">- kvm-multiboot-bss_end_addr-can-be-zero.patch [bz#1549822]
- kvm-multiboot-Remove-unused-variables-from-multiboot.c.patch [bz#1549822]
- kvm-multiboot-Use-header-names-when-displaying-fields.patch [bz#1549822]
- kvm-multiboot-fprintf-stderr.-error_report.patch [bz#1549822]
- kvm-multiboot-Reject-kernels-exceeding-the-address-space.patch [bz#1549822]
- kvm-multiboot-Check-validity-of-mh_header_addr.patch [bz#1549822]
- kvm-slirp-remove-mbuf-m_hdr-m_dat-indirection.patch [bz#1586253]
- kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586253]
- Resolves: bz#1549822
  (CVE-2018-7550 qemu-kvm: Qemu: i386:  multiboot OOB access while loading kernel image [rhel-7.6])
- Resolves: bz#1586253
  (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-160.el7" date="1534766400">- kvm-scsi-disk-support-reporting-of-rotation-rate.patch [bz#1583807]
- kvm-ide-support-reporting-of-rotation-rate.patch [bz#1583807]
- kvm-ide-avoid-referencing-NULL-dev-in-rotational-rate-se.patch [bz#1583807]
- kvm-slirp-Correct-size-check-in-m_inc.patch [bz#1586253]
- Resolves: bz#1583807
  ([DELL EMC 7.6 FEAT] option to mark virtual block device as rotational/non-rotational)
- Resolves: bz#1586253
  (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-161.el7" date="1546430400">- kvm-Inhibit-ballooning-during-postcopy.patch [bz#1659229]
- kvm-balloon-Allow-multiple-inhibit-users.patch [bz#1659229]
- kvm-check-KVM_CAP_SYNC_MMU-with-kvm_vm_check_extensi.patch [bz#1659229]
- kvm-Use-inhibit-to-prevent-ballooning-without-synchr.patch [bz#1659229]
- kvm-vfio-Inhibit-ballooning-based-on-group-attachment-to.patch [bz#1659229]
- Resolves: bz#1659229
  (Ballooning is incompatible with vfio assigned devices, but not prevented)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-162.el7" date="1547467200">- kvm-i386-Deprecate-arch-facilities-and-make-it-block-liv.patch [bz#1658407]
- kvm-Do-not-build-bluetooth-support.patch [bz#1654627]
- Resolves: bz#1654627
  (Qemu: hw: bt: keep bt/* objects from building [rhel-7.7])
- Resolves: bz#1658407
  (mode="host-model" VMs include broken "arch-facilities" flag name [qemu-kvm])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-163.el7" date="1554292800">- kvm-x86-cpu-Enable-CLDEMOTE-Demote-Cache-Line-cpu-featur.patch [bz#1537773]
- kvm-vfio-pci-Lazy-PBA-emulation.patch [bz#1459077]
- kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1689791]
- Resolves: bz#1459077
  ([Intel 7.7 Bug] QEMU version in RHEL7.4 beta does not support KVM passthrough with WFR card)
- Resolves: bz#1537773
  ([Intel 7.7 Feat] KVM Enabling SnowRidge new NIs - qemu-kvm)
- Resolves: bz#1689791
  (CVE-2019-9824 qemu-kvm: QEMU: Slirp: information leakage in tcp_emu() due to uninitialized stack variables [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-164.el7" date="1554897600">- kvm-target-i386-define-md-clear-bit-rhel.patch [bz#1693217]
- Resolves: bz#1693217
  (CVE-2018-12126 qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling [rhel-7.7] )</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-165.el7" date="1559044800">- kvm-Fix-eax-for-cpuid-leaf-0x40000000.patch [bz#1709495]
- kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1669068]
- kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1669068]
- kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1669068]
- Resolves: bz#1669068
  (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-7.7])
- Resolves: bz#1709495
  (Change CPUID[0x40000000].EAX from 0 to KVM_CPUID_FE...ATURES (0x40000001))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-166.el7" date="1559736000">- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-167.el7" date="1560340800">- Reverting kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-167.el7_7.1" date="1565611200">- kvm-qxl-check-release-info-object.patch [bz#1732337]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734748]
- Resolves: bz#1732337
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7] [rhel-7.7.z])
- Resolves: bz#1734748
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.7.z])</changelog>
</package>
<package pkgid="27f7fb7c57c3744ac78d61e1b96ce5f15c6d8c2e5f2850a2ca19079d3710ed81" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="167.el7_7.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-159.el7" date="1533124800">- kvm-multiboot-bss_end_addr-can-be-zero.patch [bz#1549822]
- kvm-multiboot-Remove-unused-variables-from-multiboot.c.patch [bz#1549822]
- kvm-multiboot-Use-header-names-when-displaying-fields.patch [bz#1549822]
- kvm-multiboot-fprintf-stderr.-error_report.patch [bz#1549822]
- kvm-multiboot-Reject-kernels-exceeding-the-address-space.patch [bz#1549822]
- kvm-multiboot-Check-validity-of-mh_header_addr.patch [bz#1549822]
- kvm-slirp-remove-mbuf-m_hdr-m_dat-indirection.patch [bz#1586253]
- kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586253]
- Resolves: bz#1549822
  (CVE-2018-7550 qemu-kvm: Qemu: i386:  multiboot OOB access while loading kernel image [rhel-7.6])
- Resolves: bz#1586253
  (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-160.el7" date="1534766400">- kvm-scsi-disk-support-reporting-of-rotation-rate.patch [bz#1583807]
- kvm-ide-support-reporting-of-rotation-rate.patch [bz#1583807]
- kvm-ide-avoid-referencing-NULL-dev-in-rotational-rate-se.patch [bz#1583807]
- kvm-slirp-Correct-size-check-in-m_inc.patch [bz#1586253]
- Resolves: bz#1583807
  ([DELL EMC 7.6 FEAT] option to mark virtual block device as rotational/non-rotational)
- Resolves: bz#1586253
  (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-161.el7" date="1546430400">- kvm-Inhibit-ballooning-during-postcopy.patch [bz#1659229]
- kvm-balloon-Allow-multiple-inhibit-users.patch [bz#1659229]
- kvm-check-KVM_CAP_SYNC_MMU-with-kvm_vm_check_extensi.patch [bz#1659229]
- kvm-Use-inhibit-to-prevent-ballooning-without-synchr.patch [bz#1659229]
- kvm-vfio-Inhibit-ballooning-based-on-group-attachment-to.patch [bz#1659229]
- Resolves: bz#1659229
  (Ballooning is incompatible with vfio assigned devices, but not prevented)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-162.el7" date="1547467200">- kvm-i386-Deprecate-arch-facilities-and-make-it-block-liv.patch [bz#1658407]
- kvm-Do-not-build-bluetooth-support.patch [bz#1654627]
- Resolves: bz#1654627
  (Qemu: hw: bt: keep bt/* objects from building [rhel-7.7])
- Resolves: bz#1658407
  (mode="host-model" VMs include broken "arch-facilities" flag name [qemu-kvm])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-163.el7" date="1554292800">- kvm-x86-cpu-Enable-CLDEMOTE-Demote-Cache-Line-cpu-featur.patch [bz#1537773]
- kvm-vfio-pci-Lazy-PBA-emulation.patch [bz#1459077]
- kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1689791]
- Resolves: bz#1459077
  ([Intel 7.7 Bug] QEMU version in RHEL7.4 beta does not support KVM passthrough with WFR card)
- Resolves: bz#1537773
  ([Intel 7.7 Feat] KVM Enabling SnowRidge new NIs - qemu-kvm)
- Resolves: bz#1689791
  (CVE-2019-9824 qemu-kvm: QEMU: Slirp: information leakage in tcp_emu() due to uninitialized stack variables [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-164.el7" date="1554897600">- kvm-target-i386-define-md-clear-bit-rhel.patch [bz#1693217]
- Resolves: bz#1693217
  (CVE-2018-12126 qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling [rhel-7.7] )</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-165.el7" date="1559044800">- kvm-Fix-eax-for-cpuid-leaf-0x40000000.patch [bz#1709495]
- kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1669068]
- kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1669068]
- kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1669068]
- Resolves: bz#1669068
  (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-7.7])
- Resolves: bz#1709495
  (Change CPUID[0x40000000].EAX from 0 to KVM_CPUID_FE...ATURES (0x40000001))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-166.el7" date="1559736000">- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-167.el7" date="1560340800">- Reverting kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-167.el7_7.1" date="1565611200">- kvm-qxl-check-release-info-object.patch [bz#1732337]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734748]
- Resolves: bz#1732337
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7] [rhel-7.7.z])
- Resolves: bz#1734748
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.7.z])</changelog>
</package>
<package pkgid="ccef6da24c21c06607d2aff4e87f2c210ff1a779bec94274d2864c4a092304fa" name="qt-settings" arch="noarch">
  <version epoch="0" ver="19" rel="23.10.el7.centos"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.3" date="1375876800">- cleanup</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 19-23.3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.4" date="1393502400">- exclude kdm</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.5" date="1415966400">- Resolves: bz#1124472,  shell namespace pollution</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.6" date="1505217600">- Create ~/.local/share folder by default if doesn't exist
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.7" date="1505217601">- Fix the way we patch kde-settings
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.8" date="1527249600">- Fix upstream URL
  Resolves: bz#1501830</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.9" date="1552910400">- Check if we have write access to home directory before creating default folders
  Resolves: bz#1579764</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.10" date="1565265600">- Use correct tcsh syntax for config scripts
  Resolves: bz#1738491</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 19-23.10.el7.centos" date="1567512000">- debrand</changelog>
</package>
<package pkgid="e68e1171bf4c43bcd52cf25f1fbab1c6ddd54ecda77b4af649600199ec596a75" name="qt-settings" arch="noarch">
  <version epoch="0" ver="19" rel="23.10.el7.centos"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.3" date="1375876800">- cleanup</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 19-23.3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.4" date="1393502400">- exclude kdm</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 19-23.5" date="1415966400">- Resolves: bz#1124472,  shell namespace pollution</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.6" date="1505217600">- Create ~/.local/share folder by default if doesn't exist
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.7" date="1505217601">- Fix the way we patch kde-settings
  Resolves: bz#1404382</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.8" date="1527249600">- Fix upstream URL
  Resolves: bz#1501830</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.9" date="1552910400">- Check if we have write access to home directory before creating default folders
  Resolves: bz#1579764</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 19-23.10" date="1565265600">- Use correct tcsh syntax for config scripts
  Resolves: bz#1738491</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 19-23.10.el7.centos" date="1567512000">- debrand</changelog>
</package>
<package pkgid="96a113f812e6e40f8a3ad500683e6b1b9e03c51093367453c5c1f55804f80001" name="rear" arch="i686">
  <version epoch="0" ver="2.4" rel="10.el7_7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-10" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807</changelog>
</package>
<package pkgid="dee064363025baa2a79efef5c8e91f9f7dee2cfa161472702a8ff5b71eb0f318" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="10.el7_7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-10" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807</changelog>
</package>
<package pkgid="48e44d070137dc55a83a3930206391a34108ff3295acb9d200a49ef129420166" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="10.el7_7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-10" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807</changelog>
</package>
<package pkgid="c1575478bdfeac5f999d2ce0ec4499679a73a1a62ee2c07dd978cc34e89392ee" name="rear" arch="x86_64">
  <version epoch="0" ver="2.4" rel="10.el7_7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-10" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807</changelog>
</package>
<package pkgid="68e07b5802d5bfa6c9178d69e9fb7ee7b620135f37f92817cf491f5351dce8e7" name="rear" arch="i686">
  <version epoch="0" ver="2.4" rel="9.el7_7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
</package>
<package pkgid="a7b1dee75eb71624a2aa12909850f4bf3a0044ea8fe1c62d2981f2952ea886b4" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="9.el7_7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
</package>
<package pkgid="9775ca7d9c5c9abbbcdaa6e049850267d632cdf2d7c845b880d841185de02fe1" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="9.el7_7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
</package>
<package pkgid="ec3ad492b9a4a45593a1444de43a0bdd0b6db253efd0610562d554b9a6610626" name="rear" arch="x86_64">
  <version epoch="0" ver="2.4" rel="9.el7_7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
</package>
<package pkgid="3fefc675981a3e41955cfb87c54166708417334441cfdc05aef8ef60997c00a9" name="rear-debuginfo" arch="i686">
  <version epoch="0" ver="2.4" rel="10.el7_7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-10" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807</changelog>
</package>
<package pkgid="e8762fac76bd18503e187f397ec9a46ce5df1e5042a28e176bab9cc1a1f3b3f7" name="rear-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4" rel="10.el7_7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-10" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807</changelog>
</package>
<package pkgid="2b12e1cada787d1740c8abcc84534cf0ee87fd7a62bd7c4900dfdb9e49aa9f81" name="rear-debuginfo" arch="i686">
  <version epoch="0" ver="2.4" rel="9.el7_7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
</package>
<package pkgid="2541febbc4c041cbd9fff0a0af10a60e15d3b88d72f2a1bbf6874f183ae91f44" name="rear-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4" rel="9.el7_7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
</package>
<package pkgid="b9a0fda196705f4294d112e909974483f5b6d40bec9d41e49181186ac9b374a4" name="resource-agents" arch="i686">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-19" date="1551355200">- CTDB: add ctdb_max_open_files parameter

  Resolves: rhbz#1651790</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-20" date="1553601600">- IPsrcaddr: add proto and table parameters
- iSCSILogicalUnit: only create iqn when it doesnt exist

  Resolves: rhbz#1504055
  Resolves: rhbz#1598969</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
</package>
<package pkgid="c7f5a9e216384ff7c49040080bb6f1fe8056038bf008e444454f1cff0d605490" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-19" date="1551355200">- CTDB: add ctdb_max_open_files parameter

  Resolves: rhbz#1651790</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-20" date="1553601600">- IPsrcaddr: add proto and table parameters
- iSCSILogicalUnit: only create iqn when it doesnt exist

  Resolves: rhbz#1504055
  Resolves: rhbz#1598969</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
</package>
<package pkgid="78620d2d2df1ace4784ab7b0d030315baf14bbf9d94ced44269c9a2cd385521a" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-19" date="1551355200">- CTDB: add ctdb_max_open_files parameter

  Resolves: rhbz#1651790</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-20" date="1553601600">- IPsrcaddr: add proto and table parameters
- iSCSILogicalUnit: only create iqn when it doesnt exist

  Resolves: rhbz#1504055
  Resolves: rhbz#1598969</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
</package>
<package pkgid="8ca3551a569d7394c44dfd740dfddcd2592c9e62edbf0e70223928e463eb4786" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-19" date="1551355200">- CTDB: add ctdb_max_open_files parameter

  Resolves: rhbz#1651790</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-20" date="1553601600">- IPsrcaddr: add proto and table parameters
- iSCSILogicalUnit: only create iqn when it doesnt exist

  Resolves: rhbz#1504055
  Resolves: rhbz#1598969</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
</package>
<package pkgid="2d61441aee0ea30531c24507aec4b5f03f40cef8dd02cc86a16d8cc71f3cf3ba" name="resource-agents" arch="i686">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.3" date="1568116800">- docker: improve daemon check to fence when docker is stopped manually

  Resolves: rhbz#1750704</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.4" date="1569585600">- NovaEvacuate: add "evacuate_delay" parameter

  Resolves: rhbz#1756262</changelog>
</package>
<package pkgid="0a1e24eda5c0ea43b739c232cceffa2b68649a17de1ef2d1c70adde73a72adc4" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.3" date="1568116800">- docker: improve daemon check to fence when docker is stopped manually

  Resolves: rhbz#1750704</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.4" date="1569585600">- NovaEvacuate: add "evacuate_delay" parameter

  Resolves: rhbz#1756262</changelog>
</package>
<package pkgid="d590b51d50920ce6b9f80bdbec7c9000514924134f6b0bc2c682135af83f1053" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.3" date="1568116800">- docker: improve daemon check to fence when docker is stopped manually

  Resolves: rhbz#1750704</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.4" date="1569585600">- NovaEvacuate: add "evacuate_delay" parameter

  Resolves: rhbz#1756262</changelog>
</package>
<package pkgid="231e3e22bf572e2a78bebc65cb10d4be43a81dd8e6613cb97a2170695b04c95e" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.3" date="1568116800">- docker: improve daemon check to fence when docker is stopped manually

  Resolves: rhbz#1750704</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.4" date="1569585600">- NovaEvacuate: add "evacuate_delay" parameter

  Resolves: rhbz#1756262</changelog>
</package>
<package pkgid="5030bd583a7195955ef6f7e623ccb659be57b2f9566b3b2cc80601c35bebccb8" name="resource-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-19" date="1551355200">- CTDB: add ctdb_max_open_files parameter

  Resolves: rhbz#1651790</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-20" date="1553601600">- IPsrcaddr: add proto and table parameters
- iSCSILogicalUnit: only create iqn when it doesnt exist

  Resolves: rhbz#1504055
  Resolves: rhbz#1598969</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
</package>
<package pkgid="c18fe6b5178200def6a7eb3def0dbe94f46fa3e88c23bba01ffb047ff1aebeb8" name="resource-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.3" date="1568116800">- docker: improve daemon check to fence when docker is stopped manually

  Resolves: rhbz#1750704</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.4" date="1569585600">- NovaEvacuate: add "evacuate_delay" parameter

  Resolves: rhbz#1756262</changelog>
</package>
<package pkgid="2992efadc114ce3a71d3cc7df6f7bd0d55af9d275daef9190d95aed853036fa6" name="resource-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-19" date="1551355200">- CTDB: add ctdb_max_open_files parameter

  Resolves: rhbz#1651790</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-20" date="1553601600">- IPsrcaddr: add proto and table parameters
- iSCSILogicalUnit: only create iqn when it doesnt exist

  Resolves: rhbz#1504055
  Resolves: rhbz#1598969</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
</package>
<package pkgid="38827d58bdc0d6365e216a348ab23c3f32dd07d7cf3257788cc9376b30f39a7c" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-19" date="1551355200">- CTDB: add ctdb_max_open_files parameter

  Resolves: rhbz#1651790</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-20" date="1553601600">- IPsrcaddr: add proto and table parameters
- iSCSILogicalUnit: only create iqn when it doesnt exist

  Resolves: rhbz#1504055
  Resolves: rhbz#1598969</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
</package>
<package pkgid="d5903bb451be4c1e658a1f7feae8c0e26ecd6a29d01ecedc5f4171c095a0a308" name="resource-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.3" date="1568116800">- docker: improve daemon check to fence when docker is stopped manually

  Resolves: rhbz#1750704</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.4" date="1569585600">- NovaEvacuate: add "evacuate_delay" parameter

  Resolves: rhbz#1756262</changelog>
</package>
<package pkgid="5111e88e8890a2833430c3a5c6bea063ee52a4c5ab2736c7965cfed7e7daff65" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.3" date="1568116800">- docker: improve daemon check to fence when docker is stopped manually

  Resolves: rhbz#1750704</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.4" date="1569585600">- NovaEvacuate: add "evacuate_delay" parameter

  Resolves: rhbz#1756262</changelog>
</package>
<package pkgid="90f55b7bd241a800a0aa964f5ed06b2f86c98880dbaba358215d9855b3569042" name="resource-agents-gcp" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-19" date="1551355200">- CTDB: add ctdb_max_open_files parameter

  Resolves: rhbz#1651790</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-20" date="1553601600">- IPsrcaddr: add proto and table parameters
- iSCSILogicalUnit: only create iqn when it doesnt exist

  Resolves: rhbz#1504055
  Resolves: rhbz#1598969</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
</package>
<package pkgid="d4d9d1ad72eab75258c21fa04458e7e6d27a411932ef0f671c8cecead75b02cb" name="resource-agents-gcp" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.3" date="1568116800">- docker: improve daemon check to fence when docker is stopped manually

  Resolves: rhbz#1750704</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.4" date="1569585600">- NovaEvacuate: add "evacuate_delay" parameter

  Resolves: rhbz#1756262</changelog>
</package>
<package pkgid="b61f05cec856fface3fa221a236570f6bed074ac6ae078d42f8c2e09fe9a8ea0" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-19" date="1551355200">- CTDB: add ctdb_max_open_files parameter

  Resolves: rhbz#1651790</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-20" date="1553601600">- IPsrcaddr: add proto and table parameters
- iSCSILogicalUnit: only create iqn when it doesnt exist

  Resolves: rhbz#1504055
  Resolves: rhbz#1598969</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
</package>
<package pkgid="1bd604d1f3b5155b50335fe5aba9b1e1f7d2190e5157f98ec83881450caef538" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.3" date="1568116800">- docker: improve daemon check to fence when docker is stopped manually

  Resolves: rhbz#1750704</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.4" date="1569585600">- NovaEvacuate: add "evacuate_delay" parameter

  Resolves: rhbz#1756262</changelog>
</package>
<package pkgid="def3001fd7f40ccf351fae65c23e6b15a012c72b9e68a2ae3f4c8dea5231a222" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-19" date="1551355200">- CTDB: add ctdb_max_open_files parameter

  Resolves: rhbz#1651790</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-20" date="1553601600">- IPsrcaddr: add proto and table parameters
- iSCSILogicalUnit: only create iqn when it doesnt exist

  Resolves: rhbz#1504055
  Resolves: rhbz#1598969</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
</package>
<package pkgid="4c4a13d128fd97cbe513bdcdaaa6d3953ab403492f849bd647ecaa28885a102c" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="30.el7_7.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.3" date="1568116800">- docker: improve daemon check to fence when docker is stopped manually

  Resolves: rhbz#1750704</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.4" date="1569585600">- NovaEvacuate: add "evacuate_delay" parameter

  Resolves: rhbz#1756262</changelog>
</package>
<package pkgid="808b68eff79ca426aa74f484073b0e522c5d2b12b8c9422ea47a581c888132e1" name="resource-agents-sap-hana-scaleout" arch="x86_64">
  <version epoch="0" ver="0.163.2" rel="7.el7_7.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-19" date="1551355200">- CTDB: add ctdb_max_open_files parameter

  Resolves: rhbz#1651790</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-20" date="1553601600">- IPsrcaddr: add proto and table parameters
- iSCSILogicalUnit: only create iqn when it doesnt exist

  Resolves: rhbz#1504055
  Resolves: rhbz#1598969</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
</package>
<package pkgid="12bc792cf37c7c31f6c813aed2b96f54b28cc217c4aa9f51ef3d3d17fda0bcb8" name="resource-agents-sap-hana-scaleout" arch="x86_64">
  <version epoch="0" ver="0.163.2" rel="7.el7_7.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.3" date="1568116800">- docker: improve daemon check to fence when docker is stopped manually

  Resolves: rhbz#1750704</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.4" date="1569585600">- NovaEvacuate: add "evacuate_delay" parameter

  Resolves: rhbz#1756262</changelog>
</package>
<package pkgid="a9d84c86e2a6d453357246fdf01ea7ae01b68a54d851f1d4f253731658c9135a" name="rhsm-gtk" arch="i686">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="31b1008f1492d718d3aad3dcdc8499ec721da460f3e8974e0463cd622ef02060" name="rhsm-gtk" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="e74f1bd5d965bb9eaf6e020e38fe882c09ac61c37cdfd89babce93c1df3148c0" name="rsyslog" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="d3a6fdb31e104e1ee11be12bdbb252424d4c91b663910518a44c1ae6590db1bd" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="08bd32701f8f17d832bc258edbf586cd470bbd45940a4fb199b9324fa545e96f" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="00d485b7d8f089d77c4ea3636a4d4b20eca7b9d022cbeea7837fd729ce4878a6" name="rsyslog" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="7f87f1efeada1ffba853a9624be595f1c2f8600f974835c6890d89a7292ecf98" name="rsyslog" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="3fae9b2a276b19e688e62d3baf95bfe994071ea9c7e78b073ae75b6c18829120" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="cbfe16ed27d90bc3901099c7536fe084dc477500936cf85f0a85e83fd9e86a6a" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="5fa5e7f2d2f6054ab49acfd1004a9a8947ad797148673707c3dcf13ab58900c3" name="rsyslog" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="143b69cc7777836a795f34f95c8ebd9ec0c24d65f8000d930e1fa5d16b97c2a1" name="rsyslog-crypto" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="d231caf6cb7e6f3ef5825bf75c5547d625e1969d49f649311326ef17a79ef318" name="rsyslog-crypto" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="938e4507685fdd52e6066a4b4f77f7a6e5d1ecb46671240ae4853d232998bab4" name="rsyslog-crypto" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="016f2a85982c26715078d35db6ddc86f95aa963d049922bcca931bb5aacb143d" name="rsyslog-crypto" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="853bf85617041c31a610e8cf5da4f102cd146b94b25d39c473752c9a9be96751" name="rsyslog-debuginfo" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="616c2dfaedccc1bf4a2031253abc07ae4f0c24a52e43aeade708c8e9602ce8e5" name="rsyslog-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="5834065db61574651f6d3ca5954a6a303605a1c1954865f4232b8dc206783025" name="rsyslog-debuginfo" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="9230f7896cf6d734fff71feeed4fb63cc91ed24419d3cf89655394f6ad9ab42a" name="rsyslog-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="59f4feac523258cbc8810379cd7d9b2c03e3e45d7f32bc0586728f687807770f" name="rsyslog-doc" arch="noarch">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="ea747bcf26f6bf1d16e139eedb21c9e4a3b70f4d488d7c8193216078a1d9456e" name="rsyslog-doc" arch="noarch">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="e302718384c1d5de51f5a928b8f74ad17b541ea92a09ea6da43ff343f4df6154" name="rsyslog-doc" arch="noarch">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="a806c35926f0a09a8a18eeb0fa5afa03fc05c9fcd34299c047c5b79885a4c8f9" name="rsyslog-doc" arch="noarch">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="35c99bc1271ab8a6d60fd5ec50d1e87ee43ae07b1236072d3b0aa3f1afabc73d" name="rsyslog-elasticsearch" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="c9b92d4dda87e45fba0b193fe0b3aa2ded26772916b39c805af80b8f6c907cab" name="rsyslog-elasticsearch" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="bcd890ce35b23b8c829d1b7e5133110c7849f54ce6656c61f5dac25261ba7f55" name="rsyslog-elasticsearch" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="445bf1a81ca2e1afbfaf06ed6003824d836d91e87a03293d6119fe55f257e3a5" name="rsyslog-elasticsearch" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="691b0817aa3bd5a0412cc889c313308b473cf627a7e7f8ad1757d9d6af3126d2" name="rsyslog-gnutls" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="c7db4e5929ae0b61fcbc5ecee4c0364f75cf5d4d67deb5bdf40b645a9f34bc26" name="rsyslog-gnutls" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="74f610554f7a866263577d36191f24d11ee984e8cb71a18761db003144dd71e6" name="rsyslog-gnutls" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="3c8b390a8c0cd366722c969c561a27b4d29e4de88d420fb1af8cd922997e5e38" name="rsyslog-gnutls" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="2b41c9d06786b3f809bb5447dbcb4962046a6d4d96f6a8addcb70a761c5993d6" name="rsyslog-gssapi" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="054f24623d9ed9de8865d2a6e68c1919e255a90b9f296d3cf95320d3b8124153" name="rsyslog-gssapi" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="9cb7d694bcf7e2580fa6d7fa04c0694db1276d4333b468835cb0c6e750cdd9dc" name="rsyslog-gssapi" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="5f91af91eb31f349ed53c2912e1b9dffd50d7ac8be7e4e5f08b92b8a48e5ef2c" name="rsyslog-gssapi" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="44d1f01d267ab7fdbe78c739d318720da76d7f7b3488c9d690277b758682e6e7" name="rsyslog-kafka" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="db5ec5dcd99137f326db41dce1ce518dd4e353d96274da793aa96b23d2fc6503" name="rsyslog-kafka" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="e04063f89204f09455ceec8cf15003fc166215eee0235987824e47c7d8153cfa" name="rsyslog-kafka" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="b1f19d3a2c9f0100e80c4bc053cef68a0cdd399f46d4b60dcec52fbd15150e87" name="rsyslog-kafka" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="e61e2f22c3604e8fcc6a9f165e5383cba66247560266320444328dbe39da7418" name="rsyslog-libdbi" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="40b10ef90680a04bbf942d46e318be4d2a250c212c7e7ce8c4f6a3f08c6b98be" name="rsyslog-libdbi" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="29c8047a8e1b256e3f0042ebcb1fc60321d863f5ab6fa6a67f47408894d3a10f" name="rsyslog-libdbi" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="5f22201e41c228fc8f1cc11d720217eee36263327e09146dc4f332bb35041826" name="rsyslog-libdbi" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="1ee1e539d507eadaceae31e9c79f0a86cacaa50a92fe6894a83f5848151fbfb3" name="rsyslog-mmaudit" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="a89a59f9a4197b0bb54384c3dd1ce23a7d9e74a669ceb851ec7d8fe5a11a8c96" name="rsyslog-mmaudit" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="d417d5ccb03225c4dd9f89af1b66963475cc2d903d9b7b8c1c1f7fb40f524d40" name="rsyslog-mmaudit" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="8331ed581f34b4f3b0ebf8d8a5c1bdc2785a508dbe3ce040daa898fd579cac8f" name="rsyslog-mmaudit" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="ab40559825b167f5034dbbaf97a4ed92e5ae06b70185b77f5940ba46527037e4" name="rsyslog-mmjsonparse" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="c72646998907191994034a2ec877eccc66c2530b294d0aa7599a89683eb0d54c" name="rsyslog-mmjsonparse" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="6f76c2a54f0a3f0a70abbbfc956023f5eaf2b3a730063857b1f8af24b9804d5c" name="rsyslog-mmjsonparse" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="e46bdadabe4b704bf6cc714f9227f8945aac5d7f8a7d10bbd5adc8762a0ae945" name="rsyslog-mmjsonparse" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="ade7feac624bb1d3411889fc265a5b76103487848ef4e0af284c1d78179c3458" name="rsyslog-mmkubernetes" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="368921bc38a22ad65e3a69ad350bba23ab4e076e2aececd0296a57502c5b1b0c" name="rsyslog-mmkubernetes" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="dd1bebed2e8d9286e7eb966b29b565e0275cbdac17df31c24cdd97157576d1a2" name="rsyslog-mmkubernetes" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="e6448c0b9dd9cd184872adea76ccebabfddf2181936eb3fed7471280bb923e53" name="rsyslog-mmkubernetes" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="5a37785c091ea70b9ede295bc1470083e34facb3cec546b42d726da313af6cff" name="rsyslog-mmnormalize" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="3be858b4aa76b531c9b2d3b2530a84d27b98f14ad2c94a862d2728ff1fde19cd" name="rsyslog-mmnormalize" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="b77aee4633a580ace5f1596b5168bc930fee61ca1e6a46941303a056834097f3" name="rsyslog-mmnormalize" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="7b6b250875c8e2984c607446039074aa273e0907190a3c3bd842c9a9bd93ecbf" name="rsyslog-mmnormalize" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="7b4bb899ebacd032d49afe96b2e1e10b1eebe8e9f962413ed44a4e098b34db4a" name="rsyslog-mmsnmptrapd" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="a99546fc1dff3646b1251075d39ddb9a91d33744cbad442975f3424300bdac53" name="rsyslog-mmsnmptrapd" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="2c7ff1afebbc6b80e041c2fdeb64131e873029f4b2d94e909b78525e7ad192dd" name="rsyslog-mmsnmptrapd" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="36173f2c174cc17d10c238edef6d3ce10daf298aa656bb49fce9968e5c227431" name="rsyslog-mmsnmptrapd" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="2a790c476cc0e6fe90c9c1699b1a1b70648d445bb1afe9e8e37127e056f09412" name="rsyslog-mysql" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="ebc47efd418ce0a94e9ebad3b86bae702592e8fb53d12d24029fb504a80f7259" name="rsyslog-mysql" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="53d8c87fdbc5c621ceccf58a5c4585966e508f78b645cd064a33f02e94ad1370" name="rsyslog-mysql" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="503ef17c1cc1626f803079c95e4367bddc367e46c4258a2b7f8a21007fcf6c0f" name="rsyslog-mysql" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="d073a2ff6ed8cff375ba076b713543a61a415e39230467d3b214f719a6781ce5" name="rsyslog-pgsql" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="deb8ed7724c07455c6de260793d88be7a9399f6ae003c568fe4ed90465b9e964" name="rsyslog-pgsql" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="da334d02ba4395a23f268b08a7eb1de8dfc77fbbde7e8bb56d024f74d67261f5" name="rsyslog-pgsql" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="84c4876a7af96b1c2a3a7b093d719cf997e6538732c955f7e7831ab443f4ae5c" name="rsyslog-pgsql" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="4f7e33a4740663e3bec85f2515bfc11e940f5a44a3cc8553d5651dc362463cef" name="rsyslog-relp" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="9e72e366c56961fd56b780cb37ee6e0253e067e8718e60b9b31e375fc7fad203" name="rsyslog-relp" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="fd9f5db75a7ac443f9f4b383a6e3f068684010b15ab49b10f5f505a4350b6279" name="rsyslog-relp" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="d68a4d5932176350c084d5885cba49cb39fa0bc277ada0b1ba31069e77bc48e4" name="rsyslog-relp" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="643598266f37279cda61725d650ffaa100d46e73474eb6e955569438d039132c" name="rsyslog-snmp" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="5e9554dcf483f6c77c7784424565a3610c0a99c4384bb02fa0587192aefd427f" name="rsyslog-snmp" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="4b955103bb007010081c70399930eea134ddc08cf4730d7b401301f56ad5193a" name="rsyslog-snmp" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="a8229d8be71a1152cdb95903a057d3ef206c151d38c9e708b35d102f4956d0a4" name="rsyslog-snmp" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="da4bae0ac5c9cfb9c79d878a28513a688b376552f829d5b6fd603f2245ab6bbd" name="rsyslog-udpspoof" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="92664054ca638fc0f085bcd6af49796e89104b8f92c84d5b9f108e500113980b" name="rsyslog-udpspoof" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.1" date="1567425600">RHEL 7.7.z ERRATUM
- added patch resolving possible segfault in core-ratelimiter
  resolves: rhbz#1746497</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41.2" date="1569240000">RHEL 7.7.z ERRATUM
- edited imjournal memleaks patch to fix introduced regression
  resolves: rhbz#1752424</changelog>
</package>
<package pkgid="37b00c8338cc41d307cad176458ffb4e03c48ebd227cfcccf13d81a2efec1fc3" name="rsyslog-udpspoof" arch="i686">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="f29831f8e1bc2798c051a094ff758ba2d9f7d77d359f87bfe0966c44c0d97ead" name="rsyslog-udpspoof" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="41.el7_7"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-30" date="1532520000">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with next bugfix
  resolves: rhbz#1531295
- updated imjournal duplicates patch making slower code optional
  and added corresponding doc patch
  resolves: rhbz#1538372</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-31" date="1532952000">RHEL 7.6 ERRATUM
- added new patch fixing ompipe dropping messages when pipe full
  resolves: rhbz#1591819
- updated mmkubernetes patch to accept non-kubernetes containers
  resolves: rhbz#1539193
  resolves: rhbz#1609023
- removed json-parsing patches as the bug is now fixed in liblognorm</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-32" date="1533297600">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with no log on EACCES
  resolves: rhbz#1531295
- removed now needless build-deps</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-33" date="1533643200">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with extended symlink watching
  resolves: rhbz#1531295
- updated mmkubernetes patch to accept dots in pod name
  resolves: rhbz#1539193</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-34" date="1533643201">RHEL 7.6 ERRATUM
- updated imfile rewrite patch with parent name bugfix
  resolves: rhbz#1531295</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-35" date="1548676800">RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
  resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
  resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
  resolves: rhbz#1658288</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-36" date="1551268800">RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
  resolves: rhbz#1622767</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-37" date="1553083200">RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
  (covscan found an issue in previous version)
  resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
  resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
  resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
  resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
  resolves: rhbz#1625935</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-38" date="1554724800">RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
  with too long paths
  resolves: rhbz#1656860</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-41" date="1563883200">RHEL 7.7.z ERRATUM
- added patch resolving memory leaks in imjournal
  resolves: rhbz#1725067</changelog>
</package>
<package pkgid="f6fe2f0a1354c971015a6faca51c278e617b0b6de07a1bdfb98fb24153022067" name="ruby-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="f338b5da7fced50033f5dace8793274a0f9b61e7cfa6277c05fcc006ec74e495" name="ruby-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="f58790372aeec073985be4d8fd169b139ad8c4db4bd3700ca0648511e9ac9fdd" name="samba" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="919f1c2b41b43215c384d458f5b103cff757d4b0ed658a188018a540c57bd04b" name="samba" arch="src">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="b12c1df50447cad7591a496ba65b79bad1604df780d2675dd9f3860243019b31" name="samba" arch="src">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="66e3c73cfac119b2c3239bd9286c154cd618c1be4d7ebb7eb32c9818b84734c6" name="samba" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="3256eb64257cd30977c0c50cc99ce2517bf97e5b6c00a3fa52666563241d4b45" name="samba-client" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="21663b5367185d5435b8f0189af2d835e2eee7ef2fb066da16eebacb2626d933" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="81fe04dcfbb5c350cd2cf2750326cd6bc1be96c4691520949977234d63602c97" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="5b4129d78df1e3f171bb210b3780410ac9b5882c5d0f893cd007530592c64f1a" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="1e977a5f09f5b988555b4753637e24d202650a2cfcd43724021202389da07b41" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="82f92e25ab1c98d05ee68017792ebc69c5e1f817b2f36074fb2f7a7483b4de9c" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="e6891a630cc972d51225896644a3352910e2e69ba4b1e8f77cdacca1631bf283" name="samba-common-libs" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="b300def36d05c4d4cfa0b734808866161d820744dde955a644edd69da00ca41f" name="samba-common-libs" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="c4e7477bcd10cdd80125218bc562e82ff8a79a76b23b7be199a8326b67658ce5" name="samba-common-tools" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="d06f8cdd34e5196e2a35e35e9877d07f3343b8c20860b7508748e58aee6d06cc" name="samba-common-tools" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="d312a27593d69e70d818d440eac38906ee6528504ac2531e9c2de15986e49a20" name="samba-dc" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="1038fcd0829414a21f355e57158817662dac0ba133319132dabc64a0d158b481" name="samba-dc" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="9bf6d4c0c4812b254e3b59df71bcd3810268d6cd6519537d79287150c7b5e3cf" name="samba-dc-libs" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="8c7c0551dbabb970a37f772fbf4bd7b1a2b9df2ca8fe3b6cefb20b196d488723" name="samba-dc-libs" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="851220f5fead9cb03b27862c1fa0aaee291da38c25da16fe90100923f6191399" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="050b4030aa10bd7adcd8d0eede1980d383a16a98bb8a55d22c7cd7e9de208a31" name="samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="4ebe1d62c0564851f171f0de96af474f06626e58962a93d3961465b681aa10b7" name="samba-devel" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="7608936169c2ac8c76a8062876774f6482564831fa2161be1a34afc6b8350ec2" name="samba-devel" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="9c06402f941209a142cac29246b6cde504d0942191e03345e07b4ca7b34f0702" name="samba-krb5-printing" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="8cfb235394a5fe6b336e1c60a4614df2c0c49e41835708f01cbc6042c6116015" name="samba-krb5-printing" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="73cf59d7d34f8b2fc82a7d1c93e444ee4e90d69c52e9791769eb417dc2f1f9da" name="samba-libs" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="f7538fc38a32b31254cf4388098edc96aa98f99db3c4b5537cc3f8a1c9dec576" name="samba-libs" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="3a9f0dd505a23fc41dbb1962714cc47bc9fdb07456388f5f7afccc3ef57c3fc1" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="90161f8a8cdec2969bff73e81178fa5c620bce09ecb42ee0c480f650c13c6d49" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="f133edc5bd2f3b40f046ace64c540a3d84789a0dd5efb912440ea06b38655db0" name="samba-python" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="aadf8a0c7fea200fb99fd1753f575fae14905af79f2677695627b69ef1b89f95" name="samba-python" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="e9fcbaf36a0c1c83b89bdab1d517fd15cbdc8eba307dce6d92d87cf0f4eb4628" name="samba-python-test" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="7801109688e5bd409ad5b85bae20ca1a506ad61df686f21ac67c3bef853f1dd8" name="samba-python-test" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="2bd9b042add0841b65797f8d087d6423b07946fd706aeda4d674ffb76a220111" name="samba-test" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="507d2e64416a377dfb8788b779fb19f3df2fc33623d3f40121691520c6fb8e8b" name="samba-test" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="48ded2b01f85cce8b8a3e8660536d69ac9b4fb36e793e6a8346e130c0d3292b6" name="samba-test-libs" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="51c6cf57d029caa922bd930282540aebd5a11d22adadb6c4b8cdd15d0c56218d" name="samba-test-libs" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="81143b1842474576225fc967ee07c0f91ddd751bdadc2605d8495e9ba264ae67" name="samba-vfs-glusterfs" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="9bcd426fb281720f865d12400d358f99cbd21d0a85b0df44abce0ddee5328f20" name="samba-winbind" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="7db8af2de3afd36eca5d1d5b338cb3265fc2e046018d22c293c0cd99ffe115a2" name="samba-winbind" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="f7cccefcd269ccf9aa2cc1c39280c2ba93a3f9c34281a4fe69d7cfa5c6b54a53" name="samba-winbind-clients" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="15906d5e0398c09e45e011b5cfc92134a197870e609f4f409c04355d20b1711d" name="samba-winbind-clients" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="51e7edf922106e13d7f152581430dace7624aa00b2c0cbaae0d15ddefa8a5ed9" name="samba-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="bc89eda33c8880bf2dd51002f71a358e57b37d09e683445c7d2c575ee4d91740" name="samba-winbind-krb5-locator" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="8f86af524f019631520be93b89ea4c24511c65afbc7958442becfc8c5c17b84d" name="samba-winbind-modules" arch="i686">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="1b9cdd33286388e55334dfa81b5cd71b0fd5834708f0713be43ebef957868f2b" name="samba-winbind-modules" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="10.el7_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-1" date="1547812800">- resolves: #1649434 - Update to version 4.9.1
- resolves: #1648852 - Fix out of bound array access in ctdb
- resolves: #1647960 - Fix segfault in the debug system with hardended build
- resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
- resolves: #1650452 - Add smbc_setOptionProtocols()
- resolves: #1659513 - Fix testparm/pdbedit crash
- resolves: #1529301 - Added new 'net ads spn' command
- resolves: #1595277 - Fix manpage for 'net ads lookup'
- resolves: #1600274 - Fix vfs_audit log which does not show full path names
- resolves: #1623140 - Fix handling the 'disable netbios' option
- resolves: #1624227 - Connect to spoolss with the correct version information
- resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
- resolves: #1579401 - Implement 'net ads leave --keep-account'
- resolves: #1624227 - Fix spoolss client operations against newer Windows
                       versions
- resolves: #1656405 - Fix looking up local system accounts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-2" date="1549886400">- resolves: #1674403 - Fix panic when setting 'force group' on a share with
                       an active connections
- resolves: #1670720 - Fix installation of samba-python
- resolves: #1669476 - Fix user lookup via UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-3" date="1552564800">- resolves: #1479451 - Fix 'net' command auth with Kerberos
- resolves: #1686158 - Fix printing with CUPS
- resolves: #1662408 - Fix username/password printing with CUPS</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-4" date="1553774400">- resolves: #1690222 - Fix --max-protocol documentation of smbclient
- resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
- resolves: #1696524 - Fix CVE-2019-3880</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-5" date="1557489600">- resolves: #1703204 - Fix smbspool krb5 authentication</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-6" date="1558699200">- related: #1703204 - Fix printing with smbspool as CUPS backend</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.9.1-7" date="1567771200">- resolves: #1749300 - Fix 'net ads join createcomputer=&lt;accountou&gt;'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-8" date="1569326400">- resolves: #1754838 - Fix username/password auth with smbspool
- resolves: #1754835 - Fix builtin groups creation.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.9.1-9" date="1570536000">- resolves: #1759445 - Fix trusted domain enumeration in windind caused
                       a Active Directory update</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.9.1.10" date="1571659200">- resolves: #1763650 - Fix spnego downgrade</changelog>
</package>
<package pkgid="aa27af89bc5e91476f66b9e102f8e78acb490fa4f85fa852e035004825c96342" name="sap-cluster-connector" arch="x86_64">
  <version epoch="0" ver="3.0.1" rel="7.el7_7.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-19" date="1551355200">- CTDB: add ctdb_max_open_files parameter

  Resolves: rhbz#1651790</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-20" date="1553601600">- IPsrcaddr: add proto and table parameters
- iSCSILogicalUnit: only create iqn when it doesnt exist

  Resolves: rhbz#1504055
  Resolves: rhbz#1598969</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
</package>
<package pkgid="59fea63aad4ea6c026b361195c4c1890ec16ed9b4eebee998777d8cf21c5c809" name="sap-cluster-connector" arch="x86_64">
  <version epoch="0" ver="3.0.1" rel="7.el7_7.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-21" date="1553774400">- aws-vpc-move-ip: use "--query" to avoid a possible race condition

  Resolves: rhbz#1693658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-22" date="1554465600">- IPsrcaddr: make proto optional to fix regression when used without
  NetworkManager

  Resolves: rhbz#1504055</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-23" date="1558353600">- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1697558</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-24" date="1560859200">- clvm: support exclusive mode

  Resolves: rhbz#1549579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-27" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1710956</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1363902</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.1" date="1563796800">- dhcpd: keep SELinux context in chroot
- CTDB: add support for v4.9+

  Resolves: rhbz#1731426
  Resolves: rhbz#1731427</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.2" date="1566561600">- SAPHanaTopology: make multi instance aware (MCOS)

  Resolves: rhbz#1744923</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.3" date="1568116800">- docker: improve daemon check to fence when docker is stopped manually

  Resolves: rhbz#1750704</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-30.4" date="1569585600">- NovaEvacuate: add "evacuate_delay" parameter

  Resolves: rhbz#1756262</changelog>
</package>
<package pkgid="d3f46630ce5029ef8b4c87da1b4463e50fb304f7c7fce8b445f0d00d6d27d927" name="sbd" arch="i686">
  <version epoch="0" ver="1.4.0" rel="4.el7_7.3"/>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-8" date="1523880000">- Added aarch64 target

  Resolves: rhbz#1568029</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.1" date="1536926400">- skip symlinks pointing to dev-nodes outside of /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.2" date="1537358400">- avoid statting potential symlink-targets in /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-1" date="1547467200">- rebase to upstream v1.4.0

  Resolves: rhbz#1660158</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-2" date="1549540800">- rebuild against pacemaker 1.20 to make sbd actually use
  the new libpengine API

  Resolves: rhbz#1661233</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-3" date="1553601600">- finalize cmap connection if disconnected from cluster
- make handling of cib-connection loss more robust

  Resolves: rhbz#1691484</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4" date="1553601601">- fix possible null-pointer-access just introduced

  Resolves: rhbz#1691484</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.1" date="1564488000">- assume graceful pacemaker exit if leftovers are unmanaged

  Resolves: rhbz#1732334</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.2" date="1564660800">- rebuild using correct target

  Resolves: rhbz#1732334</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.3" date="1565956800">- check for shutdown attribute on every cib-diff

  Resolves: rhbz#1732334</changelog>
</package>
<package pkgid="81808776d55c93f44c2bd156174719564e66cb9593d9a5e4ff672a8a290c345d" name="sbd" arch="src">
  <version epoch="0" ver="1.4.0" rel="4.el7_7.3"/>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-8" date="1523880000">- Added aarch64 target

  Resolves: rhbz#1568029</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.1" date="1536926400">- skip symlinks pointing to dev-nodes outside of /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.2" date="1537358400">- avoid statting potential symlink-targets in /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-1" date="1547467200">- rebase to upstream v1.4.0

  Resolves: rhbz#1660158</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-2" date="1549540800">- rebuild against pacemaker 1.20 to make sbd actually use
  the new libpengine API

  Resolves: rhbz#1661233</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-3" date="1553601600">- finalize cmap connection if disconnected from cluster
- make handling of cib-connection loss more robust

  Resolves: rhbz#1691484</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4" date="1553601601">- fix possible null-pointer-access just introduced

  Resolves: rhbz#1691484</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.1" date="1564488000">- assume graceful pacemaker exit if leftovers are unmanaged

  Resolves: rhbz#1732334</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.2" date="1564660800">- rebuild using correct target

  Resolves: rhbz#1732334</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.3" date="1565956800">- check for shutdown attribute on every cib-diff

  Resolves: rhbz#1732334</changelog>
</package>
<package pkgid="96509dcbfe29f0244682ea8c80dd8550c11d3c6360765365fb3cb06ac2157d83" name="sbd" arch="src">
  <version epoch="0" ver="1.4.0" rel="4.el7_7.3"/>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-8" date="1523880000">- Added aarch64 target

  Resolves: rhbz#1568029</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.1" date="1536926400">- skip symlinks pointing to dev-nodes outside of /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.2" date="1537358400">- avoid statting potential symlink-targets in /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-1" date="1547467200">- rebase to upstream v1.4.0

  Resolves: rhbz#1660158</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-2" date="1549540800">- rebuild against pacemaker 1.20 to make sbd actually use
  the new libpengine API

  Resolves: rhbz#1661233</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-3" date="1553601600">- finalize cmap connection if disconnected from cluster
- make handling of cib-connection loss more robust

  Resolves: rhbz#1691484</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4" date="1553601601">- fix possible null-pointer-access just introduced

  Resolves: rhbz#1691484</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.1" date="1564488000">- assume graceful pacemaker exit if leftovers are unmanaged

  Resolves: rhbz#1732334</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.2" date="1564660800">- rebuild using correct target

  Resolves: rhbz#1732334</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.3" date="1565956800">- check for shutdown attribute on every cib-diff

  Resolves: rhbz#1732334</changelog>
</package>
<package pkgid="c1babc1f9282afe999ac74dc0c2656a21ec4a98e99078c928cbf778571b81699" name="sbd" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="4.el7_7.3"/>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-8" date="1523880000">- Added aarch64 target

  Resolves: rhbz#1568029</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.1" date="1536926400">- skip symlinks pointing to dev-nodes outside of /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.2" date="1537358400">- avoid statting potential symlink-targets in /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-1" date="1547467200">- rebase to upstream v1.4.0

  Resolves: rhbz#1660158</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-2" date="1549540800">- rebuild against pacemaker 1.20 to make sbd actually use
  the new libpengine API

  Resolves: rhbz#1661233</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-3" date="1553601600">- finalize cmap connection if disconnected from cluster
- make handling of cib-connection loss more robust

  Resolves: rhbz#1691484</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4" date="1553601601">- fix possible null-pointer-access just introduced

  Resolves: rhbz#1691484</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.1" date="1564488000">- assume graceful pacemaker exit if leftovers are unmanaged

  Resolves: rhbz#1732334</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.2" date="1564660800">- rebuild using correct target

  Resolves: rhbz#1732334</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.3" date="1565956800">- check for shutdown attribute on every cib-diff

  Resolves: rhbz#1732334</changelog>
</package>
<package pkgid="c0333a77bcb19cb77fd248fd1c681b1bb0371ed38d5faf610acd7dfebe08af57" name="sbd-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.0" rel="4.el7_7.3"/>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-8" date="1523880000">- Added aarch64 target

  Resolves: rhbz#1568029</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.1" date="1536926400">- skip symlinks pointing to dev-nodes outside of /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.2" date="1537358400">- avoid statting potential symlink-targets in /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-1" date="1547467200">- rebase to upstream v1.4.0

  Resolves: rhbz#1660158</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-2" date="1549540800">- rebuild against pacemaker 1.20 to make sbd actually use
  the new libpengine API

  Resolves: rhbz#1661233</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-3" date="1553601600">- finalize cmap connection if disconnected from cluster
- make handling of cib-connection loss more robust

  Resolves: rhbz#1691484</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4" date="1553601601">- fix possible null-pointer-access just introduced

  Resolves: rhbz#1691484</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.1" date="1564488000">- assume graceful pacemaker exit if leftovers are unmanaged

  Resolves: rhbz#1732334</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.2" date="1564660800">- rebuild using correct target

  Resolves: rhbz#1732334</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.3" date="1565956800">- check for shutdown attribute on every cib-diff

  Resolves: rhbz#1732334</changelog>
</package>
<package pkgid="b7f2d31df930e6382fc4f9529e44e5ccc0e56fd27750568a974219f3dc029c37" name="sbd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="4.el7_7.3"/>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-8" date="1523880000">- Added aarch64 target

  Resolves: rhbz#1568029</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.1" date="1536926400">- skip symlinks pointing to dev-nodes outside of /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.2" date="1537358400">- avoid statting potential symlink-targets in /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-1" date="1547467200">- rebase to upstream v1.4.0

  Resolves: rhbz#1660158</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-2" date="1549540800">- rebuild against pacemaker 1.20 to make sbd actually use
  the new libpengine API

  Resolves: rhbz#1661233</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-3" date="1553601600">- finalize cmap connection if disconnected from cluster
- make handling of cib-connection loss more robust

  Resolves: rhbz#1691484</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4" date="1553601601">- fix possible null-pointer-access just introduced

  Resolves: rhbz#1691484</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.1" date="1564488000">- assume graceful pacemaker exit if leftovers are unmanaged

  Resolves: rhbz#1732334</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.2" date="1564660800">- rebuild using correct target

  Resolves: rhbz#1732334</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.4.0-4.3" date="1565956800">- check for shutdown attribute on every cib-diff

  Resolves: rhbz#1732334</changelog>
</package>
<package pkgid="95ad3ddac98a41d80bacf6212ce20ca7707561290ea05d6fa3825445cdfdb38b" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="50000c98572a64d227bbf53102c2f704612c772484d74657e8236296eff5555c" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="8a13f281f28461f1c55d75ed556bfa0187f5fb81aa5828c78d1b7458a6786665" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="cc4d57b465091dee40898272606023c96282c284a93dff777fbc518ffa04f60d" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="574f0b6f89309312a1b08887a8ef96750d8a12bfe9da1dd74ca4f8c4a55ef38a" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="b2f0ee58b473d3488bb63ff09ee68a892a2cee909803675542249bffd92ee0a4" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="6a28aa32b00431b324d15fa4ca838f1d33d3ca0fdb622f96f2a18ad31074d7bc" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="9cf5b87bf256e52820f6836f73be2866f016acf342eef7188d3bfe37fd324f72" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="7740fa9256f2daafc407a28a813d432dabae4dd8f04016fee91a8433f7b41067" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="f18ded88e40bb55224b7b4e55fbadbf1f55d182f6d4bdcf981e5002a8fdf6547" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="c5810ee6472bb9da04bbfcfb96ce586a397ce1a02652fee92ae9c550e3e1b6cb" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="04a1997619e1e91be6c5a1c34641cc94db9a315d5264673f977579ca2d16d258" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="65fdd92bfbdf93cc5276f178263c034c54471b1555ca48c03eb52179949efea1" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="23b04a62a705a5040920569c2b58d711e8b0f48226db110ac364bc6a2b9825bc" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="91ff85a6dc098f926a339dbdf363f7c86d766d521150ad5c5da22e1a4b4812d1" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="e3bfcd7af9ecc83b4eab574b0e9bb3e80254cb7b8a4a3857eb842a100eac8f24" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="b8e8ac7ac254332490bd11a9ef732d1799ca90ebcccf3bbef18181157d3978ce" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="ed464accbf0b4ae439300dd4aba5cd8fd4740d0fecb7a97f070122a413dfaf96" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="c7cfc2a1c1dd3bb76663f33cba975d0412a3e536124e1254408aa7c18d445ab1" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="3fe88f746df72fca25a7a4ba384f872c990327540d735f2b706194853065d2e0" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="8577554473677c3cc7fb072f4b0831996e04a660a05ad147fd33d6cb1c8932db" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="00f17af9a218b0d63ecd8ee49bbaf27199f39d57b337708edf5b1f0b90177fce" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="fd5c3b4728b63afe1dfa707df248ff7cf474bc88d86bbd5bbf53b17760f26a52" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="8bc649cbf7a0fca439c59cc879264f844a2d712af073f9caa0c511de3aeb7042" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="118efd8d28c62759e3fe0e3ff539822482db60bc948565ed3fe33a73b0d1f864" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="65806ddd9c437c77a525ecb8c8a70d343cebcdd855db2daa422fe3b3c4f9f4b5" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="3dc44900309b0c52ecfc5a75404f2ab33fe5630a20ee8d02a9c1248f5331ad54" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="678775b4a2fe1deb790a9a26b587aace1599be66e094a4864e16a10422cdacbe" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="d1734315f7b19aca03d753878815f0140db74c0fd568d33c2762930e39299392" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="8afda95de7371fabbe99bedc1ff4b759a478a1a119f3865c9aed8991537bbdae" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7.1"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-244" date="1556020800">- Update Nagios policy when sudo is used
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-245" date="1556193600">- Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
Resolves: rhbz#1695342</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-246" date="1556798400">- Allow ngaios to use chown capability
Resolves: rhbz#1653309
- Dontaudit gpg_domain to create netlink_audit sockets
Resolves: rhbz#1535109
- Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
Resolves: rhbz#1558836
- Update domain_can_mmap_files() boolean to allow also mmap lnk files</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-247" date="1558094400">- Fix typo in gpg SELinux module
- Update gpg policy to make ti working with confined users
Resolves: rhbz#1535109
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
Resolves: rhbz#1653309
- Allow nrpe_t domain to be dbus cliennt
Resolves: rhbz#1653309
- Add interface sssd_signull()
Resolves: rhbz#1653309
- Update userdomains to allow confined users to create gpg keys
Resolves: rhbz#1535109</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-248" date="1558440000">- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1703573</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
</package>
<package pkgid="42bc045f7942fce0080259c2e5e4f7ddbad002d58211ab93d9ce2780ba2f7d58" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="a58b58b97f3272e6db2fe33793db76a9a294da3b32d92dc32ee2db9391047ce1" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="252.el7_7.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-249" date="1558526400">- Allow nrpe_t domain to read process state of systemd_logind_t
- Add interface systemd_logind_read_state()
Resolves: rhbz#1653309</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-250" date="1559736000">- Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
Resolves: rhbz#1716400</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-251" date="1560168000">- Allow redis to creating tmp files with own label
Resolves: rhbz#1646765</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252" date="1561636800">- Allow ganesha_t domain to connect to tcp portmap_port_t
Resolves: rhbz#1715088</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.1" date="1562760000">- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.2" date="1572264000">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.3" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.4" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.5" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-252.6" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095</changelog>
</package>
<package pkgid="b0b12524939fd0f9b07a95f5f7315f4ab872bba1f80746616bb38c5350e06aa3" name="sg3_utils" arch="i686">
  <version epoch="0" ver="1.37" rel="18.el7_7.1"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-10" date="1488888000">- Fix rescan-scsi-bus.sh for scan all luns. (RHBZ #1380744)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-11" date="1489492800">- Fix the help message of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-12" date="1494417600">- Fix the manpage of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-13" date="1528804800">- Add missing short options of sg_test_rwbuf.
  (RHBZ #1359289)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-14" date="1528804801">- Add '--ignore-rev` option to rescan-scsi-bus.sh.
  (RHBZ #1400491)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-15" date="1529409600">- Massive manapge and cli help message fixes.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-16" date="1531742400">- Fix inline help of sg_logs. (RHBZ #1359274)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-17" date="1531828800">- Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
  (RHBZ #1359282, #1359286, #1359292)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18" date="1551182400">- Fix sg_turs help invocation in an old mode (#1601797)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18.el7_7.1" date="1565956800">- Add 59-fc-wwpn-id.rules (#1684302)</changelog>
</package>
<package pkgid="3d2a4c34ff19456b45c0537eaff90b0167be055887bfee0247608d4cbd144736" name="sg3_utils" arch="src">
  <version epoch="0" ver="1.37" rel="18.el7_7.1"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-10" date="1488888000">- Fix rescan-scsi-bus.sh for scan all luns. (RHBZ #1380744)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-11" date="1489492800">- Fix the help message of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-12" date="1494417600">- Fix the manpage of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-13" date="1528804800">- Add missing short options of sg_test_rwbuf.
  (RHBZ #1359289)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-14" date="1528804801">- Add '--ignore-rev` option to rescan-scsi-bus.sh.
  (RHBZ #1400491)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-15" date="1529409600">- Massive manapge and cli help message fixes.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-16" date="1531742400">- Fix inline help of sg_logs. (RHBZ #1359274)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-17" date="1531828800">- Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
  (RHBZ #1359282, #1359286, #1359292)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18" date="1551182400">- Fix sg_turs help invocation in an old mode (#1601797)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18.el7_7.1" date="1565956800">- Add 59-fc-wwpn-id.rules (#1684302)</changelog>
</package>
<package pkgid="4b324a1dc9c416f44c64166b187260717fbd8dd2a4a9871520b7780b9a4a57d3" name="sg3_utils" arch="src">
  <version epoch="0" ver="1.37" rel="18.el7_7.1"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-10" date="1488888000">- Fix rescan-scsi-bus.sh for scan all luns. (RHBZ #1380744)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-11" date="1489492800">- Fix the help message of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-12" date="1494417600">- Fix the manpage of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-13" date="1528804800">- Add missing short options of sg_test_rwbuf.
  (RHBZ #1359289)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-14" date="1528804801">- Add '--ignore-rev` option to rescan-scsi-bus.sh.
  (RHBZ #1400491)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-15" date="1529409600">- Massive manapge and cli help message fixes.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-16" date="1531742400">- Fix inline help of sg_logs. (RHBZ #1359274)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-17" date="1531828800">- Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
  (RHBZ #1359282, #1359286, #1359292)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18" date="1551182400">- Fix sg_turs help invocation in an old mode (#1601797)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18.el7_7.1" date="1565956800">- Add 59-fc-wwpn-id.rules (#1684302)</changelog>
</package>
<package pkgid="06df55eceec33c4ff75a4cfb64ac32ac6c3d690f44381a2878418e6f9efb136b" name="sg3_utils" arch="x86_64">
  <version epoch="0" ver="1.37" rel="18.el7_7.1"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-10" date="1488888000">- Fix rescan-scsi-bus.sh for scan all luns. (RHBZ #1380744)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-11" date="1489492800">- Fix the help message of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-12" date="1494417600">- Fix the manpage of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-13" date="1528804800">- Add missing short options of sg_test_rwbuf.
  (RHBZ #1359289)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-14" date="1528804801">- Add '--ignore-rev` option to rescan-scsi-bus.sh.
  (RHBZ #1400491)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-15" date="1529409600">- Massive manapge and cli help message fixes.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-16" date="1531742400">- Fix inline help of sg_logs. (RHBZ #1359274)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-17" date="1531828800">- Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
  (RHBZ #1359282, #1359286, #1359292)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18" date="1551182400">- Fix sg_turs help invocation in an old mode (#1601797)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18.el7_7.1" date="1565956800">- Add 59-fc-wwpn-id.rules (#1684302)</changelog>
</package>
<package pkgid="f2c6cfc67f0f0bfdd44066c68e0a46962b93dfcfbb9f9f3acc860da79805215c" name="sg3_utils-debuginfo" arch="i686">
  <version epoch="0" ver="1.37" rel="18.el7_7.1"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-10" date="1488888000">- Fix rescan-scsi-bus.sh for scan all luns. (RHBZ #1380744)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-11" date="1489492800">- Fix the help message of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-12" date="1494417600">- Fix the manpage of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-13" date="1528804800">- Add missing short options of sg_test_rwbuf.
  (RHBZ #1359289)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-14" date="1528804801">- Add '--ignore-rev` option to rescan-scsi-bus.sh.
  (RHBZ #1400491)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-15" date="1529409600">- Massive manapge and cli help message fixes.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-16" date="1531742400">- Fix inline help of sg_logs. (RHBZ #1359274)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-17" date="1531828800">- Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
  (RHBZ #1359282, #1359286, #1359292)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18" date="1551182400">- Fix sg_turs help invocation in an old mode (#1601797)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18.el7_7.1" date="1565956800">- Add 59-fc-wwpn-id.rules (#1684302)</changelog>
</package>
<package pkgid="fe89ac5cd41ac18df5463afc290d4997c77fd987bd31c00a9d5e7dcae182f292" name="sg3_utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.37" rel="18.el7_7.1"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-10" date="1488888000">- Fix rescan-scsi-bus.sh for scan all luns. (RHBZ #1380744)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-11" date="1489492800">- Fix the help message of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-12" date="1494417600">- Fix the manpage of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-13" date="1528804800">- Add missing short options of sg_test_rwbuf.
  (RHBZ #1359289)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-14" date="1528804801">- Add '--ignore-rev` option to rescan-scsi-bus.sh.
  (RHBZ #1400491)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-15" date="1529409600">- Massive manapge and cli help message fixes.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-16" date="1531742400">- Fix inline help of sg_logs. (RHBZ #1359274)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-17" date="1531828800">- Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
  (RHBZ #1359282, #1359286, #1359292)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18" date="1551182400">- Fix sg_turs help invocation in an old mode (#1601797)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18.el7_7.1" date="1565956800">- Add 59-fc-wwpn-id.rules (#1684302)</changelog>
</package>
<package pkgid="ea97c5d9b00442cf1a9914232b9b45bc741d8689853fc735e58847ffe8377945" name="sg3_utils-devel" arch="i686">
  <version epoch="0" ver="1.37" rel="18.el7_7.1"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-10" date="1488888000">- Fix rescan-scsi-bus.sh for scan all luns. (RHBZ #1380744)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-11" date="1489492800">- Fix the help message of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-12" date="1494417600">- Fix the manpage of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-13" date="1528804800">- Add missing short options of sg_test_rwbuf.
  (RHBZ #1359289)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-14" date="1528804801">- Add '--ignore-rev` option to rescan-scsi-bus.sh.
  (RHBZ #1400491)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-15" date="1529409600">- Massive manapge and cli help message fixes.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-16" date="1531742400">- Fix inline help of sg_logs. (RHBZ #1359274)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-17" date="1531828800">- Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
  (RHBZ #1359282, #1359286, #1359292)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18" date="1551182400">- Fix sg_turs help invocation in an old mode (#1601797)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18.el7_7.1" date="1565956800">- Add 59-fc-wwpn-id.rules (#1684302)</changelog>
</package>
<package pkgid="b7584dfa11b054de074000bf82e274c2676b694a9f8e369ae8be0ada3ce678ff" name="sg3_utils-devel" arch="x86_64">
  <version epoch="0" ver="1.37" rel="18.el7_7.1"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-10" date="1488888000">- Fix rescan-scsi-bus.sh for scan all luns. (RHBZ #1380744)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-11" date="1489492800">- Fix the help message of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-12" date="1494417600">- Fix the manpage of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-13" date="1528804800">- Add missing short options of sg_test_rwbuf.
  (RHBZ #1359289)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-14" date="1528804801">- Add '--ignore-rev` option to rescan-scsi-bus.sh.
  (RHBZ #1400491)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-15" date="1529409600">- Massive manapge and cli help message fixes.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-16" date="1531742400">- Fix inline help of sg_logs. (RHBZ #1359274)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-17" date="1531828800">- Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
  (RHBZ #1359282, #1359286, #1359292)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18" date="1551182400">- Fix sg_turs help invocation in an old mode (#1601797)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18.el7_7.1" date="1565956800">- Add 59-fc-wwpn-id.rules (#1684302)</changelog>
</package>
<package pkgid="56479f01ae02fb6375a29c38f390ca8734c93b585bccd2cad1148feddfab805e" name="sg3_utils-libs" arch="i686">
  <version epoch="0" ver="1.37" rel="18.el7_7.1"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-10" date="1488888000">- Fix rescan-scsi-bus.sh for scan all luns. (RHBZ #1380744)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-11" date="1489492800">- Fix the help message of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-12" date="1494417600">- Fix the manpage of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-13" date="1528804800">- Add missing short options of sg_test_rwbuf.
  (RHBZ #1359289)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-14" date="1528804801">- Add '--ignore-rev` option to rescan-scsi-bus.sh.
  (RHBZ #1400491)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-15" date="1529409600">- Massive manapge and cli help message fixes.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-16" date="1531742400">- Fix inline help of sg_logs. (RHBZ #1359274)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-17" date="1531828800">- Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
  (RHBZ #1359282, #1359286, #1359292)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18" date="1551182400">- Fix sg_turs help invocation in an old mode (#1601797)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18.el7_7.1" date="1565956800">- Add 59-fc-wwpn-id.rules (#1684302)</changelog>
</package>
<package pkgid="f146ae4659dae1b6ef6e0b928ea70337ae62d6d956d2800fd23325edc1933aa8" name="sg3_utils-libs" arch="x86_64">
  <version epoch="0" ver="1.37" rel="18.el7_7.1"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-10" date="1488888000">- Fix rescan-scsi-bus.sh for scan all luns. (RHBZ #1380744)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.37-11" date="1489492800">- Fix the help message of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-12" date="1494417600">- Fix the manpage of `forceremove` and `forcerescan` command.
  (RHBZ #1360915)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-13" date="1528804800">- Add missing short options of sg_test_rwbuf.
  (RHBZ #1359289)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-14" date="1528804801">- Add '--ignore-rev` option to rescan-scsi-bus.sh.
  (RHBZ #1400491)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-15" date="1529409600">- Massive manapge and cli help message fixes.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-16" date="1531742400">- Fix inline help of sg_logs. (RHBZ #1359274)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.37-17" date="1531828800">- Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
  (RHBZ #1359282, #1359286, #1359292)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18" date="1551182400">- Fix sg_turs help invocation in an old mode (#1601797)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 1.37-18.el7_7.1" date="1565956800">- Add 59-fc-wwpn-id.rules (#1684302)</changelog>
</package>
<package pkgid="37836222850264d87b606a6f49f5cc05bc4da75a02afd2f2a52bc6e2468c6867" name="smartmontools" arch="i686">
  <version epoch="1" ver="7.0" rel="1.el7_7.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-2" date="1379332800">- smartd service file wrong path to environment file (#1008516)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-5" date="1462190400">- do not leak file descriptor when calling mailx (#1212582)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-6" date="1462449600">- allow to discover more devices (#1294999)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-7" date="1473249600">- add update-smart-drivedb.8 man page (#1367237)
- fix drivedb update url (#1364830)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-8" date="1490529600">- use up to date drivedb (#1388510)
- less scarry messages reported to users (#1340462)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.5-1" date="1507723200">- smartmontools updated to 6.5
- adds support for NVMe devices (#1369731)
- minor spec cleanup (#1463148)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.0-1" date="1550145600">- smartmontools updated to 7.0 (#1588532)
- fixed detection of Device Statistics log with 256 sectors (#1590190)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.0-1.1" date="1575374400">- fix smartctl crash when cciss answer is &gt;512 bytes (#1778690)</changelog>
</package>
<package pkgid="32fbbea68db05f7cf1d149c58c19f6c7329debf7c5bbe7e9ec10a8312c0c980e" name="smartmontools" arch="src">
  <version epoch="1" ver="7.0" rel="1.el7_7.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-2" date="1379332800">- smartd service file wrong path to environment file (#1008516)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-5" date="1462190400">- do not leak file descriptor when calling mailx (#1212582)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-6" date="1462449600">- allow to discover more devices (#1294999)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-7" date="1473249600">- add update-smart-drivedb.8 man page (#1367237)
- fix drivedb update url (#1364830)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-8" date="1490529600">- use up to date drivedb (#1388510)
- less scarry messages reported to users (#1340462)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.5-1" date="1507723200">- smartmontools updated to 6.5
- adds support for NVMe devices (#1369731)
- minor spec cleanup (#1463148)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.0-1" date="1550145600">- smartmontools updated to 7.0 (#1588532)
- fixed detection of Device Statistics log with 256 sectors (#1590190)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.0-1.1" date="1575374400">- fix smartctl crash when cciss answer is &gt;512 bytes (#1778690)</changelog>
</package>
<package pkgid="c12f940cf218c5766ebf4ecc34e0c8674d08f4dfd7ca97bdccff094d7666ec9d" name="smartmontools" arch="src">
  <version epoch="1" ver="7.0" rel="1.el7_7.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-2" date="1379332800">- smartd service file wrong path to environment file (#1008516)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-5" date="1462190400">- do not leak file descriptor when calling mailx (#1212582)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-6" date="1462449600">- allow to discover more devices (#1294999)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-7" date="1473249600">- add update-smart-drivedb.8 man page (#1367237)
- fix drivedb update url (#1364830)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-8" date="1490529600">- use up to date drivedb (#1388510)
- less scarry messages reported to users (#1340462)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.5-1" date="1507723200">- smartmontools updated to 6.5
- adds support for NVMe devices (#1369731)
- minor spec cleanup (#1463148)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.0-1" date="1550145600">- smartmontools updated to 7.0 (#1588532)
- fixed detection of Device Statistics log with 256 sectors (#1590190)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.0-1.1" date="1575374400">- fix smartctl crash when cciss answer is &gt;512 bytes (#1778690)</changelog>
</package>
<package pkgid="eef65a72a8e81d9d1b5bd56bcba6bd8a9e328e0051dbff17e6bb86904578cce5" name="smartmontools" arch="x86_64">
  <version epoch="1" ver="7.0" rel="1.el7_7.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-2" date="1379332800">- smartd service file wrong path to environment file (#1008516)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-5" date="1462190400">- do not leak file descriptor when calling mailx (#1212582)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-6" date="1462449600">- allow to discover more devices (#1294999)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-7" date="1473249600">- add update-smart-drivedb.8 man page (#1367237)
- fix drivedb update url (#1364830)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-8" date="1490529600">- use up to date drivedb (#1388510)
- less scarry messages reported to users (#1340462)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.5-1" date="1507723200">- smartmontools updated to 6.5
- adds support for NVMe devices (#1369731)
- minor spec cleanup (#1463148)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.0-1" date="1550145600">- smartmontools updated to 7.0 (#1588532)
- fixed detection of Device Statistics log with 256 sectors (#1590190)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.0-1.1" date="1575374400">- fix smartctl crash when cciss answer is &gt;512 bytes (#1778690)</changelog>
</package>
<package pkgid="a1b8bb40ed2fd349ed2e15c642388504fa40090c22f1c67e503424f566995cba" name="smartmontools-debuginfo" arch="i686">
  <version epoch="1" ver="7.0" rel="1.el7_7.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-2" date="1379332800">- smartd service file wrong path to environment file (#1008516)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-5" date="1462190400">- do not leak file descriptor when calling mailx (#1212582)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-6" date="1462449600">- allow to discover more devices (#1294999)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-7" date="1473249600">- add update-smart-drivedb.8 man page (#1367237)
- fix drivedb update url (#1364830)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-8" date="1490529600">- use up to date drivedb (#1388510)
- less scarry messages reported to users (#1340462)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.5-1" date="1507723200">- smartmontools updated to 6.5
- adds support for NVMe devices (#1369731)
- minor spec cleanup (#1463148)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.0-1" date="1550145600">- smartmontools updated to 7.0 (#1588532)
- fixed detection of Device Statistics log with 256 sectors (#1590190)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.0-1.1" date="1575374400">- fix smartctl crash when cciss answer is &gt;512 bytes (#1778690)</changelog>
</package>
<package pkgid="36953166c0bd9fa2edef1ac02ba4102837378aeb9c2f0a55f17b21af8415dcab" name="smartmontools-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.0" rel="1.el7_7.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-2" date="1379332800">- smartd service file wrong path to environment file (#1008516)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-5" date="1462190400">- do not leak file descriptor when calling mailx (#1212582)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-6" date="1462449600">- allow to discover more devices (#1294999)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-7" date="1473249600">- add update-smart-drivedb.8 man page (#1367237)
- fix drivedb update url (#1364830)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.2-8" date="1490529600">- use up to date drivedb (#1388510)
- less scarry messages reported to users (#1340462)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:6.5-1" date="1507723200">- smartmontools updated to 6.5
- adds support for NVMe devices (#1369731)
- minor spec cleanup (#1463148)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.0-1" date="1550145600">- smartmontools updated to 7.0 (#1588532)
- fixed detection of Device Statistics log with 256 sectors (#1590190)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.0-1.1" date="1575374400">- fix smartctl crash when cciss answer is &gt;512 bytes (#1778690)</changelog>
</package>
<package pkgid="cfb114fb17d03044fe2ce28189413b6e763eea7c28956248121d194e9b6621c8" name="sos" arch="noarch">
  <version epoch="0" ver="3.7" rel="10.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-2" date="1556625600">- [sos] bump release
  Resolves: bz1656812
- [pcp] collect pmlogger without a sizelimit
  Resolves: bz1639166
- [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
  Resolves: bz1697854
- [foreman,satellite] increase plugin default timeouts
  Resolves: bz1697813
- [sosreport] update sos.conf manpages
  Resolves: bz1311129
- [openstack_instack] add ansible.log
  Resolves: bz1702802</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-3" date="1558440000">- [katello] support both locations of qpid SSL certs
  Resolves: bz1711305
- [plugins] add vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-4" date="1559217600">- Add conflict to old vdsm package versions
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-5" date="1561464000">- Updates to vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-6" date="1564660800">- [utilities] Fix high CPU usage and slow command collection
  Resolves: bz1736422
- [sosreport,plugins] Stop plugin execution after timeout hit
  Resolves: bz1736424</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-7" date="1568289600">- [ovirt_hosted_engine] Add gluster deployment and cleanup log
  Resolves: bz1751576
- [vdsm]: Fix executing shell commands
  Resolves: bz1751577
- [ovn_*] Add support to containerized setups, add commands
  Resolves: bz1751578</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-8" date="1570795200">- [kernel] Don't collect trace file by default
  Resolves: bz1760737</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-9" date="1573041600">- [Plugin, kernel] interim sysroot fixes
  Resolves: bz1769259</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-10" date="1573560000">- [archive] Handle checking sysroot in _make_leading_paths
  Resolves: bz1769259</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.7-10.el7.centos" date="1574769600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="848dbae718e06f8a37c1f9d3961bab398e261da12d07cdb7bdf52479c39b820a" name="sos" arch="noarch">
  <version epoch="0" ver="3.7" rel="10.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-2" date="1556625600">- [sos] bump release
  Resolves: bz1656812
- [pcp] collect pmlogger without a sizelimit
  Resolves: bz1639166
- [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
  Resolves: bz1697854
- [foreman,satellite] increase plugin default timeouts
  Resolves: bz1697813
- [sosreport] update sos.conf manpages
  Resolves: bz1311129
- [openstack_instack] add ansible.log
  Resolves: bz1702802</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-3" date="1558440000">- [katello] support both locations of qpid SSL certs
  Resolves: bz1711305
- [plugins] add vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-4" date="1559217600">- Add conflict to old vdsm package versions
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-5" date="1561464000">- Updates to vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-6" date="1564660800">- [utilities] Fix high CPU usage and slow command collection
  Resolves: bz1736422
- [sosreport,plugins] Stop plugin execution after timeout hit
  Resolves: bz1736424</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-7" date="1568289600">- [ovirt_hosted_engine] Add gluster deployment and cleanup log
  Resolves: bz1751576
- [vdsm]: Fix executing shell commands
  Resolves: bz1751577
- [ovn_*] Add support to containerized setups, add commands
  Resolves: bz1751578</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-8" date="1570795200">- [kernel] Don't collect trace file by default
  Resolves: bz1760737</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-9" date="1573041600">- [Plugin, kernel] interim sysroot fixes
  Resolves: bz1769259</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-10" date="1573560000">- [archive] Handle checking sysroot in _make_leading_paths
  Resolves: bz1769259</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.7-10.el7.centos" date="1574769600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ca0310e2d364d98d3e63e8a1354bc4e5201733d2519b5ac24f444cae3f4b9f54" name="sos" arch="src">
  <version epoch="0" ver="3.7" rel="10.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-2" date="1556625600">- [sos] bump release
  Resolves: bz1656812
- [pcp] collect pmlogger without a sizelimit
  Resolves: bz1639166
- [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
  Resolves: bz1697854
- [foreman,satellite] increase plugin default timeouts
  Resolves: bz1697813
- [sosreport] update sos.conf manpages
  Resolves: bz1311129
- [openstack_instack] add ansible.log
  Resolves: bz1702802</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-3" date="1558440000">- [katello] support both locations of qpid SSL certs
  Resolves: bz1711305
- [plugins] add vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-4" date="1559217600">- Add conflict to old vdsm package versions
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-5" date="1561464000">- Updates to vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-6" date="1564660800">- [utilities] Fix high CPU usage and slow command collection
  Resolves: bz1736422
- [sosreport,plugins] Stop plugin execution after timeout hit
  Resolves: bz1736424</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-7" date="1568289600">- [ovirt_hosted_engine] Add gluster deployment and cleanup log
  Resolves: bz1751576
- [vdsm]: Fix executing shell commands
  Resolves: bz1751577
- [ovn_*] Add support to containerized setups, add commands
  Resolves: bz1751578</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-8" date="1570795200">- [kernel] Don't collect trace file by default
  Resolves: bz1760737</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-9" date="1573041600">- [Plugin, kernel] interim sysroot fixes
  Resolves: bz1769259</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-10" date="1573560000">- [archive] Handle checking sysroot in _make_leading_paths
  Resolves: bz1769259</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.7-10.el7.centos" date="1574769600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="21fc317a9aa939ee27589589fc80c4987f3b4b38f66207f0eca4353eb62f0141" name="sos" arch="src">
  <version epoch="0" ver="3.7" rel="10.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-2" date="1556625600">- [sos] bump release
  Resolves: bz1656812
- [pcp] collect pmlogger without a sizelimit
  Resolves: bz1639166
- [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
  Resolves: bz1697854
- [foreman,satellite] increase plugin default timeouts
  Resolves: bz1697813
- [sosreport] update sos.conf manpages
  Resolves: bz1311129
- [openstack_instack] add ansible.log
  Resolves: bz1702802</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-3" date="1558440000">- [katello] support both locations of qpid SSL certs
  Resolves: bz1711305
- [plugins] add vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-4" date="1559217600">- Add conflict to old vdsm package versions
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-5" date="1561464000">- Updates to vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-6" date="1564660800">- [utilities] Fix high CPU usage and slow command collection
  Resolves: bz1736422
- [sosreport,plugins] Stop plugin execution after timeout hit
  Resolves: bz1736424</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-7" date="1568289600">- [ovirt_hosted_engine] Add gluster deployment and cleanup log
  Resolves: bz1751576
- [vdsm]: Fix executing shell commands
  Resolves: bz1751577
- [ovn_*] Add support to containerized setups, add commands
  Resolves: bz1751578</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-8" date="1570795200">- [kernel] Don't collect trace file by default
  Resolves: bz1760737</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-9" date="1573041600">- [Plugin, kernel] interim sysroot fixes
  Resolves: bz1769259</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-10" date="1573560000">- [archive] Handle checking sysroot in _make_leading_paths
  Resolves: bz1769259</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.7-10.el7.centos" date="1574769600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2e00554c1388547b8ebd3abd0f62746429d95f93efcf5b1d1a2bace9b4c95390" name="sos" arch="noarch">
  <version epoch="0" ver="3.7" rel="6.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-13" date="1547985600">- [policies] Add RHCOS policy and plugins
  Resolves: bz1667217</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-14" date="1550577600">- [crio] Add new plugin
  Resolves: bz1666321</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-15" date="1553083200">- [docker] do not collect 'system df' by default
  Resolves: bz1690273</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-1" date="1553688000">- New upstream release sos-3.7</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-2" date="1556625600">- [sos] bump release
  Resolves: bz1656812
- [pcp] collect pmlogger without a sizelimit
  Resolves: bz1639166
- [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
  Resolves: bz1697854
- [foreman,satellite] increase plugin default timeouts
  Resolves: bz1697813
- [sosreport] update sos.conf manpages
  Resolves: bz1311129
- [openstack_instack] add ansible.log
  Resolves: bz1702802</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-3" date="1558440000">- [katello] support both locations of qpid SSL certs
  Resolves: bz1711305
- [plugins] add vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-4" date="1559217600">- Add conflict to old vdsm package versions
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-5" date="1561464000">- Updates to vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-6" date="1564660800">- [utilities] Fix high CPU usage and slow command collection
  Resolves: bz1736422
- [sosreport,plugins] Stop plugin execution after timeout hit
  Resolves: bz1736424</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.7-6.el7.centos" date="1567512000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2b363569bc29867d8c028c78f3572db4c47d2880235dd2b786426c0be97b39a2" name="sos" arch="noarch">
  <version epoch="0" ver="3.7" rel="6.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-13" date="1547985600">- [policies] Add RHCOS policy and plugins
  Resolves: bz1667217</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-14" date="1550577600">- [crio] Add new plugin
  Resolves: bz1666321</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-15" date="1553083200">- [docker] do not collect 'system df' by default
  Resolves: bz1690273</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-1" date="1553688000">- New upstream release sos-3.7</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-2" date="1556625600">- [sos] bump release
  Resolves: bz1656812
- [pcp] collect pmlogger without a sizelimit
  Resolves: bz1639166
- [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
  Resolves: bz1697854
- [foreman,satellite] increase plugin default timeouts
  Resolves: bz1697813
- [sosreport] update sos.conf manpages
  Resolves: bz1311129
- [openstack_instack] add ansible.log
  Resolves: bz1702802</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-3" date="1558440000">- [katello] support both locations of qpid SSL certs
  Resolves: bz1711305
- [plugins] add vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-4" date="1559217600">- Add conflict to old vdsm package versions
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-5" date="1561464000">- Updates to vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-6" date="1564660800">- [utilities] Fix high CPU usage and slow command collection
  Resolves: bz1736422
- [sosreport,plugins] Stop plugin execution after timeout hit
  Resolves: bz1736424</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.7-6.el7.centos" date="1567512000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4b72b6908403992d8b91706dd842b85dacdac60b10a7312c06a70f53d5b5e581" name="sos" arch="src">
  <version epoch="0" ver="3.7" rel="6.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-13" date="1547985600">- [policies] Add RHCOS policy and plugins
  Resolves: bz1667217</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-14" date="1550577600">- [crio] Add new plugin
  Resolves: bz1666321</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-15" date="1553083200">- [docker] do not collect 'system df' by default
  Resolves: bz1690273</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-1" date="1553688000">- New upstream release sos-3.7</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-2" date="1556625600">- [sos] bump release
  Resolves: bz1656812
- [pcp] collect pmlogger without a sizelimit
  Resolves: bz1639166
- [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
  Resolves: bz1697854
- [foreman,satellite] increase plugin default timeouts
  Resolves: bz1697813
- [sosreport] update sos.conf manpages
  Resolves: bz1311129
- [openstack_instack] add ansible.log
  Resolves: bz1702802</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-3" date="1558440000">- [katello] support both locations of qpid SSL certs
  Resolves: bz1711305
- [plugins] add vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-4" date="1559217600">- Add conflict to old vdsm package versions
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-5" date="1561464000">- Updates to vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-6" date="1564660800">- [utilities] Fix high CPU usage and slow command collection
  Resolves: bz1736422
- [sosreport,plugins] Stop plugin execution after timeout hit
  Resolves: bz1736424</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.7-6.el7.centos" date="1567512000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="92202b836e7b0b74d51cbcdec5b66de1e1a6ba0c56e6cd50a13859dc2cf2cb59" name="sos" arch="src">
  <version epoch="0" ver="3.7" rel="6.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-13" date="1547985600">- [policies] Add RHCOS policy and plugins
  Resolves: bz1667217</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-14" date="1550577600">- [crio] Add new plugin
  Resolves: bz1666321</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-15" date="1553083200">- [docker] do not collect 'system df' by default
  Resolves: bz1690273</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-1" date="1553688000">- New upstream release sos-3.7</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-2" date="1556625600">- [sos] bump release
  Resolves: bz1656812
- [pcp] collect pmlogger without a sizelimit
  Resolves: bz1639166
- [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
  Resolves: bz1697854
- [foreman,satellite] increase plugin default timeouts
  Resolves: bz1697813
- [sosreport] update sos.conf manpages
  Resolves: bz1311129
- [openstack_instack] add ansible.log
  Resolves: bz1702802</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-3" date="1558440000">- [katello] support both locations of qpid SSL certs
  Resolves: bz1711305
- [plugins] add vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-4" date="1559217600">- Add conflict to old vdsm package versions
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-5" date="1561464000">- Updates to vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-6" date="1564660800">- [utilities] Fix high CPU usage and slow command collection
  Resolves: bz1736422
- [sosreport,plugins] Stop plugin execution after timeout hit
  Resolves: bz1736424</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.7-6.el7.centos" date="1567512000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="551f0fca1eaf943c59d028f690db3aebf2f96d60d73ff32a12a06d4272ad82e7" name="sos" arch="noarch">
  <version epoch="0" ver="3.7" rel="7.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-14" date="1550577600">- [crio] Add new plugin
  Resolves: bz1666321</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-15" date="1553083200">- [docker] do not collect 'system df' by default
  Resolves: bz1690273</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-1" date="1553688000">- New upstream release sos-3.7</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-2" date="1556625600">- [sos] bump release
  Resolves: bz1656812
- [pcp] collect pmlogger without a sizelimit
  Resolves: bz1639166
- [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
  Resolves: bz1697854
- [foreman,satellite] increase plugin default timeouts
  Resolves: bz1697813
- [sosreport] update sos.conf manpages
  Resolves: bz1311129
- [openstack_instack] add ansible.log
  Resolves: bz1702802</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-3" date="1558440000">- [katello] support both locations of qpid SSL certs
  Resolves: bz1711305
- [plugins] add vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-4" date="1559217600">- Add conflict to old vdsm package versions
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-5" date="1561464000">- Updates to vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-6" date="1564660800">- [utilities] Fix high CPU usage and slow command collection
  Resolves: bz1736422
- [sosreport,plugins] Stop plugin execution after timeout hit
  Resolves: bz1736424</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-7" date="1568289600">- [ovirt_hosted_engine] Add gluster deployment and cleanup log
  Resolves: bz1751576
- [vdsm]: Fix executing shell commands
  Resolves: bz1751577
- [ovn_*] Add support to containerized setups, add commands
  Resolves: bz1751578</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.7-7.el7.centos" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5ede6286fa6807a930a0d6be9b3a71f2df007ae275ca8cba8d631d5fc17b6f06" name="sos" arch="noarch">
  <version epoch="0" ver="3.7" rel="7.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-14" date="1550577600">- [crio] Add new plugin
  Resolves: bz1666321</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-15" date="1553083200">- [docker] do not collect 'system df' by default
  Resolves: bz1690273</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-1" date="1553688000">- New upstream release sos-3.7</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-2" date="1556625600">- [sos] bump release
  Resolves: bz1656812
- [pcp] collect pmlogger without a sizelimit
  Resolves: bz1639166
- [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
  Resolves: bz1697854
- [foreman,satellite] increase plugin default timeouts
  Resolves: bz1697813
- [sosreport] update sos.conf manpages
  Resolves: bz1311129
- [openstack_instack] add ansible.log
  Resolves: bz1702802</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-3" date="1558440000">- [katello] support both locations of qpid SSL certs
  Resolves: bz1711305
- [plugins] add vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-4" date="1559217600">- Add conflict to old vdsm package versions
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-5" date="1561464000">- Updates to vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-6" date="1564660800">- [utilities] Fix high CPU usage and slow command collection
  Resolves: bz1736422
- [sosreport,plugins] Stop plugin execution after timeout hit
  Resolves: bz1736424</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-7" date="1568289600">- [ovirt_hosted_engine] Add gluster deployment and cleanup log
  Resolves: bz1751576
- [vdsm]: Fix executing shell commands
  Resolves: bz1751577
- [ovn_*] Add support to containerized setups, add commands
  Resolves: bz1751578</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.7-7.el7.centos" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c4cda9622927ad0c46f3473c3754da74aa2adc4d510a318e5ec9b1db63aedb59" name="sos" arch="src">
  <version epoch="0" ver="3.7" rel="7.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-14" date="1550577600">- [crio] Add new plugin
  Resolves: bz1666321</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-15" date="1553083200">- [docker] do not collect 'system df' by default
  Resolves: bz1690273</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-1" date="1553688000">- New upstream release sos-3.7</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-2" date="1556625600">- [sos] bump release
  Resolves: bz1656812
- [pcp] collect pmlogger without a sizelimit
  Resolves: bz1639166
- [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
  Resolves: bz1697854
- [foreman,satellite] increase plugin default timeouts
  Resolves: bz1697813
- [sosreport] update sos.conf manpages
  Resolves: bz1311129
- [openstack_instack] add ansible.log
  Resolves: bz1702802</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-3" date="1558440000">- [katello] support both locations of qpid SSL certs
  Resolves: bz1711305
- [plugins] add vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-4" date="1559217600">- Add conflict to old vdsm package versions
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-5" date="1561464000">- Updates to vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-6" date="1564660800">- [utilities] Fix high CPU usage and slow command collection
  Resolves: bz1736422
- [sosreport,plugins] Stop plugin execution after timeout hit
  Resolves: bz1736424</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-7" date="1568289600">- [ovirt_hosted_engine] Add gluster deployment and cleanup log
  Resolves: bz1751576
- [vdsm]: Fix executing shell commands
  Resolves: bz1751577
- [ovn_*] Add support to containerized setups, add commands
  Resolves: bz1751578</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.7-7.el7.centos" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="12fcf52ec08aa5c061672730eb28e7ff3fe1d0d60aab4499bb22b31899af2d75" name="sos" arch="src">
  <version epoch="0" ver="3.7" rel="7.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-14" date="1550577600">- [crio] Add new plugin
  Resolves: bz1666321</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-15" date="1553083200">- [docker] do not collect 'system df' by default
  Resolves: bz1690273</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-1" date="1553688000">- New upstream release sos-3.7</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-2" date="1556625600">- [sos] bump release
  Resolves: bz1656812
- [pcp] collect pmlogger without a sizelimit
  Resolves: bz1639166
- [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
  Resolves: bz1697854
- [foreman,satellite] increase plugin default timeouts
  Resolves: bz1697813
- [sosreport] update sos.conf manpages
  Resolves: bz1311129
- [openstack_instack] add ansible.log
  Resolves: bz1702802</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-3" date="1558440000">- [katello] support both locations of qpid SSL certs
  Resolves: bz1711305
- [plugins] add vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-4" date="1559217600">- Add conflict to old vdsm package versions
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-5" date="1561464000">- Updates to vdsm plugin
  Resolves: bz1706060</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-6" date="1564660800">- [utilities] Fix high CPU usage and slow command collection
  Resolves: bz1736422
- [sosreport,plugins] Stop plugin execution after timeout hit
  Resolves: bz1736424</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.7-7" date="1568289600">- [ovirt_hosted_engine] Add gluster deployment and cleanup log
  Resolves: bz1751576
- [vdsm]: Fix executing shell commands
  Resolves: bz1751577
- [ovn_*] Add support to containerized setups, add commands
  Resolves: bz1751578</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.7-7.el7.centos" date="1571140800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="1159c69289a95d2cdfda90a7b495b11bf163ac429ec8e8c1dd6e785ba7baeed8" name="spamassassin" arch="i686">
  <version epoch="0" ver="3.4.0" rel="5.el7_7"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; 3.3.2-14" date="1352980800">- Fix incorrect pgrep path. Fixes bug #875844</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.3.2-15" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3.2-16" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.3.2-17" date="1389700800">- document rawbody's split into chunks (#892350)
- avoid using array of cleaned uris &lt;fkrska@redhat.com&gt; (#892348)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3.2-18" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.4.0-1" date="1411732800">- update to 3.4.0
- Apply fix for amavisd and spampd reloading after rules updates. Fixes bug #1145654</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 3.4.0-2" date="1432036800">- Fix typo in Plugin/Razor2 preventing plugin to work</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-3" date="1538049600">- Fix CVE-2018-11781 - Local user code injection in the meta rule syntax
- Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for
- scan timeouts and resulting denial of service
- Resolves: rhbz#1632999</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-4" date="1538049601">- Add missing Requires for perl(XSLoader) and perl(ExtUtils::MakeMaker),
- which are no longer auto-generated due to a (expected) change in rpm-build
- Related: rhbz#1632999</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-5" date="1579176000">- Add support for SHA-512 and SHA-256 signatures in sa-update
- Resolves: rhbz#1787382</changelog>
</package>
<package pkgid="b459846a4711bb3c3fc5baa5dcc618fdd09d0d7532162ee216a260e6adf6f1d1" name="spamassassin" arch="src">
  <version epoch="0" ver="3.4.0" rel="5.el7_7"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; 3.3.2-14" date="1352980800">- Fix incorrect pgrep path. Fixes bug #875844</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.3.2-15" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3.2-16" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.3.2-17" date="1389700800">- document rawbody's split into chunks (#892350)
- avoid using array of cleaned uris &lt;fkrska@redhat.com&gt; (#892348)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3.2-18" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.4.0-1" date="1411732800">- update to 3.4.0
- Apply fix for amavisd and spampd reloading after rules updates. Fixes bug #1145654</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 3.4.0-2" date="1432036800">- Fix typo in Plugin/Razor2 preventing plugin to work</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-3" date="1538049600">- Fix CVE-2018-11781 - Local user code injection in the meta rule syntax
- Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for
- scan timeouts and resulting denial of service
- Resolves: rhbz#1632999</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-4" date="1538049601">- Add missing Requires for perl(XSLoader) and perl(ExtUtils::MakeMaker),
- which are no longer auto-generated due to a (expected) change in rpm-build
- Related: rhbz#1632999</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-5" date="1579176000">- Add support for SHA-512 and SHA-256 signatures in sa-update
- Resolves: rhbz#1787382</changelog>
</package>
<package pkgid="682faecd50a6c1bea5af30c685f8baf01e75568be16cdf76097dcbc63324b762" name="spamassassin" arch="src">
  <version epoch="0" ver="3.4.0" rel="5.el7_7"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; 3.3.2-14" date="1352980800">- Fix incorrect pgrep path. Fixes bug #875844</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.3.2-15" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3.2-16" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.3.2-17" date="1389700800">- document rawbody's split into chunks (#892350)
- avoid using array of cleaned uris &lt;fkrska@redhat.com&gt; (#892348)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3.2-18" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.4.0-1" date="1411732800">- update to 3.4.0
- Apply fix for amavisd and spampd reloading after rules updates. Fixes bug #1145654</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 3.4.0-2" date="1432036800">- Fix typo in Plugin/Razor2 preventing plugin to work</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-3" date="1538049600">- Fix CVE-2018-11781 - Local user code injection in the meta rule syntax
- Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for
- scan timeouts and resulting denial of service
- Resolves: rhbz#1632999</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-4" date="1538049601">- Add missing Requires for perl(XSLoader) and perl(ExtUtils::MakeMaker),
- which are no longer auto-generated due to a (expected) change in rpm-build
- Related: rhbz#1632999</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-5" date="1579176000">- Add support for SHA-512 and SHA-256 signatures in sa-update
- Resolves: rhbz#1787382</changelog>
</package>
<package pkgid="1f45ce3c58b402c09131d2f14114de9e01b5e975fd904f9220fa756e25650680" name="spamassassin" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="5.el7_7"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; 3.3.2-14" date="1352980800">- Fix incorrect pgrep path. Fixes bug #875844</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.3.2-15" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3.2-16" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.3.2-17" date="1389700800">- document rawbody's split into chunks (#892350)
- avoid using array of cleaned uris &lt;fkrska@redhat.com&gt; (#892348)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3.2-18" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.4.0-1" date="1411732800">- update to 3.4.0
- Apply fix for amavisd and spampd reloading after rules updates. Fixes bug #1145654</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 3.4.0-2" date="1432036800">- Fix typo in Plugin/Razor2 preventing plugin to work</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-3" date="1538049600">- Fix CVE-2018-11781 - Local user code injection in the meta rule syntax
- Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for
- scan timeouts and resulting denial of service
- Resolves: rhbz#1632999</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-4" date="1538049601">- Add missing Requires for perl(XSLoader) and perl(ExtUtils::MakeMaker),
- which are no longer auto-generated due to a (expected) change in rpm-build
- Related: rhbz#1632999</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-5" date="1579176000">- Add support for SHA-512 and SHA-256 signatures in sa-update
- Resolves: rhbz#1787382</changelog>
</package>
<package pkgid="b6940bf0fedab92a86d5a3995590d45d35a452e4144657c94b878c772279b01b" name="spamassassin-debuginfo" arch="i686">
  <version epoch="0" ver="3.4.0" rel="5.el7_7"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; 3.3.2-14" date="1352980800">- Fix incorrect pgrep path. Fixes bug #875844</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.3.2-15" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3.2-16" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.3.2-17" date="1389700800">- document rawbody's split into chunks (#892350)
- avoid using array of cleaned uris &lt;fkrska@redhat.com&gt; (#892348)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3.2-18" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.4.0-1" date="1411732800">- update to 3.4.0
- Apply fix for amavisd and spampd reloading after rules updates. Fixes bug #1145654</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 3.4.0-2" date="1432036800">- Fix typo in Plugin/Razor2 preventing plugin to work</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-3" date="1538049600">- Fix CVE-2018-11781 - Local user code injection in the meta rule syntax
- Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for
- scan timeouts and resulting denial of service
- Resolves: rhbz#1632999</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-4" date="1538049601">- Add missing Requires for perl(XSLoader) and perl(ExtUtils::MakeMaker),
- which are no longer auto-generated due to a (expected) change in rpm-build
- Related: rhbz#1632999</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-5" date="1579176000">- Add support for SHA-512 and SHA-256 signatures in sa-update
- Resolves: rhbz#1787382</changelog>
</package>
<package pkgid="fc2ac873fb6f8254d202acc9d56446f0235bc8b96e1123b771aedec6cfaea245" name="spamassassin-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="5.el7_7"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; 3.3.2-14" date="1352980800">- Fix incorrect pgrep path. Fixes bug #875844</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.3.2-15" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3.2-16" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.3.2-17" date="1389700800">- document rawbody's split into chunks (#892350)
- avoid using array of cleaned uris &lt;fkrska@redhat.com&gt; (#892348)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3.2-18" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.4.0-1" date="1411732800">- update to 3.4.0
- Apply fix for amavisd and spampd reloading after rules updates. Fixes bug #1145654</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 3.4.0-2" date="1432036800">- Fix typo in Plugin/Razor2 preventing plugin to work</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-3" date="1538049600">- Fix CVE-2018-11781 - Local user code injection in the meta rule syntax
- Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for
- scan timeouts and resulting denial of service
- Resolves: rhbz#1632999</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-4" date="1538049601">- Add missing Requires for perl(XSLoader) and perl(ExtUtils::MakeMaker),
- which are no longer auto-generated due to a (expected) change in rpm-build
- Related: rhbz#1632999</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-5" date="1579176000">- Add support for SHA-512 and SHA-256 signatures in sa-update
- Resolves: rhbz#1787382</changelog>
</package>
<package pkgid="e71db18398e6854309f71e6cec9e9a460ec3943b9e48baa1f1a956e1a5f0a998" name="spausedd" arch="i686">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="58845d5df0c1ecfd541a0bd73165bdfbf899f06d3a403506379a6673faf88d0d" name="spausedd" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="6.el7_7.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-3" date="1523016000">- Resolves: rhbz#1560468

- totemcrypto: Check length of the packet</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-4" date="1523966400">- Resolves: rhbz#1422598

- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6.1" date="1565956800">- Resolves: rhbz#1740181

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
</package>
<package pkgid="bdd87a98a1aa6103b4210c1266e39f068f889579a0558aa5a17880e8c3580061" name="sqlite" arch="i686">
  <version epoch="0" ver="3.7.17" rel="8.el7_7.1"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-1" date="1369224000">- Update to 3.7.17 (http://www.sqlite.org/releaselog/3_7_17.html)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-2" date="1386244800">- Backported CAST fix from latest upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.7.17-4.1" date="1404993600">- Backport 64k page fix from latest upstream (#1118151)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-5" date="1408449600">- Release bump</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.7.17-6" date="1413892800">- Release bump for ppc64le</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.7.17-7" date="1431086400">- Release bump</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; 3.7.17-8" date="1437652800">- Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416
  Resolves: rhbz#1244732</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; 3.7.17-8.1" date="1577966400">- Fixes for CVE-2019-13734 (#1786505)</changelog>
</package>
<package pkgid="55a203c7f2db2525a95568f26bd132223a089db89b0b59ddd9d35dd57ac367e0" name="sqlite" arch="src">
  <version epoch="0" ver="3.7.17" rel="8.el7_7.1"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-1" date="1369224000">- Update to 3.7.17 (http://www.sqlite.org/releaselog/3_7_17.html)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-2" date="1386244800">- Backported CAST fix from latest upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.7.17-4.1" date="1404993600">- Backport 64k page fix from latest upstream (#1118151)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-5" date="1408449600">- Release bump</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.7.17-6" date="1413892800">- Release bump for ppc64le</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.7.17-7" date="1431086400">- Release bump</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; 3.7.17-8" date="1437652800">- Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416
  Resolves: rhbz#1244732</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; 3.7.17-8.1" date="1577966400">- Fixes for CVE-2019-13734 (#1786505)</changelog>
</package>
<package pkgid="8ab395c03994d6f2aa542062f017268fede073dee352e99c5eda4a24396d5cf9" name="sqlite" arch="src">
  <version epoch="0" ver="3.7.17" rel="8.el7_7.1"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-1" date="1369224000">- Update to 3.7.17 (http://www.sqlite.org/releaselog/3_7_17.html)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-2" date="1386244800">- Backported CAST fix from latest upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.7.17-4.1" date="1404993600">- Backport 64k page fix from latest upstream (#1118151)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-5" date="1408449600">- Release bump</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.7.17-6" date="1413892800">- Release bump for ppc64le</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.7.17-7" date="1431086400">- Release bump</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; 3.7.17-8" date="1437652800">- Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416
  Resolves: rhbz#1244732</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; 3.7.17-8.1" date="1577966400">- Fixes for CVE-2019-13734 (#1786505)</changelog>
</package>
<package pkgid="4903f56fd31314807e899e3bf133ed44530efede8d1cba64466d4e25f688818d" name="sqlite" arch="x86_64">
  <version epoch="0" ver="3.7.17" rel="8.el7_7.1"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-1" date="1369224000">- Update to 3.7.17 (http://www.sqlite.org/releaselog/3_7_17.html)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-2" date="1386244800">- Backported CAST fix from latest upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.7.17-4.1" date="1404993600">- Backport 64k page fix from latest upstream (#1118151)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-5" date="1408449600">- Release bump</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.7.17-6" date="1413892800">- Release bump for ppc64le</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.7.17-7" date="1431086400">- Release bump</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; 3.7.17-8" date="1437652800">- Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416
  Resolves: rhbz#1244732</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; 3.7.17-8.1" date="1577966400">- Fixes for CVE-2019-13734 (#1786505)</changelog>
</package>
<package pkgid="a8ddc80cbad7f49936bfdfe6811c2c066d61234fc434f0ddb373e2b886a66321" name="sqlite-debuginfo" arch="i686">
  <version epoch="0" ver="3.7.17" rel="8.el7_7.1"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-1" date="1369224000">- Update to 3.7.17 (http://www.sqlite.org/releaselog/3_7_17.html)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-2" date="1386244800">- Backported CAST fix from latest upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.7.17-4.1" date="1404993600">- Backport 64k page fix from latest upstream (#1118151)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-5" date="1408449600">- Release bump</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.7.17-6" date="1413892800">- Release bump for ppc64le</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.7.17-7" date="1431086400">- Release bump</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; 3.7.17-8" date="1437652800">- Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416
  Resolves: rhbz#1244732</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; 3.7.17-8.1" date="1577966400">- Fixes for CVE-2019-13734 (#1786505)</changelog>
</package>
<package pkgid="493cf9d81177c1f433f5693dec1ac6e79be0b9c99607859abe830c432829ae2c" name="sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7.17" rel="8.el7_7.1"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-1" date="1369224000">- Update to 3.7.17 (http://www.sqlite.org/releaselog/3_7_17.html)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-2" date="1386244800">- Backported CAST fix from latest upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.7.17-4.1" date="1404993600">- Backport 64k page fix from latest upstream (#1118151)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-5" date="1408449600">- Release bump</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.7.17-6" date="1413892800">- Release bump for ppc64le</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.7.17-7" date="1431086400">- Release bump</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; 3.7.17-8" date="1437652800">- Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416
  Resolves: rhbz#1244732</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; 3.7.17-8.1" date="1577966400">- Fixes for CVE-2019-13734 (#1786505)</changelog>
</package>
<package pkgid="c0bd6ad14e6c79536d3787a570142c76d7faaa632b2a7c36126e8c230fe0dc62" name="sqlite-devel" arch="i686">
  <version epoch="0" ver="3.7.17" rel="8.el7_7.1"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-1" date="1369224000">- Update to 3.7.17 (http://www.sqlite.org/releaselog/3_7_17.html)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-2" date="1386244800">- Backported CAST fix from latest upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.7.17-4.1" date="1404993600">- Backport 64k page fix from latest upstream (#1118151)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-5" date="1408449600">- Release bump</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.7.17-6" date="1413892800">- Release bump for ppc64le</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.7.17-7" date="1431086400">- Release bump</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; 3.7.17-8" date="1437652800">- Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416
  Resolves: rhbz#1244732</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; 3.7.17-8.1" date="1577966400">- Fixes for CVE-2019-13734 (#1786505)</changelog>
</package>
<package pkgid="864654bec903253824e03545516e86e6f51070af0d4587a0c9f7b6be911bc7c7" name="sqlite-devel" arch="x86_64">
  <version epoch="0" ver="3.7.17" rel="8.el7_7.1"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-1" date="1369224000">- Update to 3.7.17 (http://www.sqlite.org/releaselog/3_7_17.html)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-2" date="1386244800">- Backported CAST fix from latest upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.7.17-4.1" date="1404993600">- Backport 64k page fix from latest upstream (#1118151)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-5" date="1408449600">- Release bump</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.7.17-6" date="1413892800">- Release bump for ppc64le</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.7.17-7" date="1431086400">- Release bump</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; 3.7.17-8" date="1437652800">- Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416
  Resolves: rhbz#1244732</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; 3.7.17-8.1" date="1577966400">- Fixes for CVE-2019-13734 (#1786505)</changelog>
</package>
<package pkgid="378e5819b3823e2f90a89af093b8cbb8c12fc919a471a3d7f6dad45288cc16b4" name="sqlite-doc" arch="noarch">
  <version epoch="0" ver="3.7.17" rel="8.el7_7.1"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-1" date="1369224000">- Update to 3.7.17 (http://www.sqlite.org/releaselog/3_7_17.html)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-2" date="1386244800">- Backported CAST fix from latest upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.7.17-4.1" date="1404993600">- Backport 64k page fix from latest upstream (#1118151)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-5" date="1408449600">- Release bump</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.7.17-6" date="1413892800">- Release bump for ppc64le</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.7.17-7" date="1431086400">- Release bump</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; 3.7.17-8" date="1437652800">- Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416
  Resolves: rhbz#1244732</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; 3.7.17-8.1" date="1577966400">- Fixes for CVE-2019-13734 (#1786505)</changelog>
</package>
<package pkgid="1d495f442d6da207404dfa4acd466a39bab0ffa92624a8e36d5e44fb1c1d5e62" name="sqlite-doc" arch="noarch">
  <version epoch="0" ver="3.7.17" rel="8.el7_7.1"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-1" date="1369224000">- Update to 3.7.17 (http://www.sqlite.org/releaselog/3_7_17.html)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-2" date="1386244800">- Backported CAST fix from latest upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.7.17-4.1" date="1404993600">- Backport 64k page fix from latest upstream (#1118151)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-5" date="1408449600">- Release bump</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.7.17-6" date="1413892800">- Release bump for ppc64le</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.7.17-7" date="1431086400">- Release bump</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; 3.7.17-8" date="1437652800">- Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416
  Resolves: rhbz#1244732</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; 3.7.17-8.1" date="1577966400">- Fixes for CVE-2019-13734 (#1786505)</changelog>
</package>
<package pkgid="ff2c0b5bcbf152fd77b158459d9448d57a694e9f519e535c553700cf8d7a379e" name="sqlite-tcl" arch="i686">
  <version epoch="0" ver="3.7.17" rel="8.el7_7.1"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-1" date="1369224000">- Update to 3.7.17 (http://www.sqlite.org/releaselog/3_7_17.html)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-2" date="1386244800">- Backported CAST fix from latest upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.7.17-4.1" date="1404993600">- Backport 64k page fix from latest upstream (#1118151)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-5" date="1408449600">- Release bump</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.7.17-6" date="1413892800">- Release bump for ppc64le</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.7.17-7" date="1431086400">- Release bump</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; 3.7.17-8" date="1437652800">- Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416
  Resolves: rhbz#1244732</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; 3.7.17-8.1" date="1577966400">- Fixes for CVE-2019-13734 (#1786505)</changelog>
</package>
<package pkgid="786be6eb20302bd8263ae892cf554cee17cfe820ae4d30b5abe14b3152170e33" name="sqlite-tcl" arch="x86_64">
  <version epoch="0" ver="3.7.17" rel="8.el7_7.1"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-1" date="1369224000">- Update to 3.7.17 (http://www.sqlite.org/releaselog/3_7_17.html)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-2" date="1386244800">- Backported CAST fix from latest upstream</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.7.17-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.7.17-4.1" date="1404993600">- Backport 64k page fix from latest upstream (#1118151)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.7.17-5" date="1408449600">- Release bump</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.7.17-6" date="1413892800">- Release bump for ppc64le</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.7.17-7" date="1431086400">- Release bump</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; 3.7.17-8" date="1437652800">- Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416
  Resolves: rhbz#1244732</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; 3.7.17-8.1" date="1577966400">- Fixes for CVE-2019-13734 (#1786505)</changelog>
</package>
<package pkgid="cc3f86cd9994788caafefe354d33399a115e19ac639ed9c5ee8d7d2f149e3ef5" name="sssd" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="75437c15eb9207c30d983b7b652d46824a97630d559f378a756e0c5f31ad0d39" name="sssd" arch="src">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="9a32402036f9233a9ea79a861e056b5578909c22d49b5e47dc78f74b70a73670" name="sssd" arch="src">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="ddec4143f6ab91195bb8f544c500a27d4d77ccbb76b392a0078c3b87e53254a3" name="sssd" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="e74dd22bab1518cd6f8b798bf0407cac63eea60832791335a2db898350c78d8b" name="sssd-ad" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="e7ba68d483095b3e4ba5631d3da9b768d60d956ec74408a6652103342d1c4bea" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="81ded0914edeb9306eacd31cabbe22b20b9599a54cc76a97b628c21342f8465b" name="sssd-client" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="7c33baafcf2b855601491f6da421df173a6caccdd9a0210474c4ad15715d158e" name="sssd-client" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="e917b100f0f3cb4dc1a737492a9b8ca097d37e3d574d58f7a06458a695727ffa" name="sssd-common" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="66f15bea2af422ec77716f2ce1fd4b1d36c1235a1395ee06217e0a02a008e155" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="a43586415d6752fff2d3af2d68c8aa88365f539935a0ee6e0161c63c7b906a19" name="sssd-common-pac" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="458ecf28c5ab43dcaf489da2fa4c1d9bd1f093fd3251a014288dbdd8f9ef8f92" name="sssd-common-pac" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="7eb1df7387dfaa62a23adc8ef4bf687b9baee2be12c71034c57905c2ba88e58a" name="sssd-dbus" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="3c384f841539e06fd96c131e3c95caf04448615adb78aa151d8f71e5c0219f3a" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="7792e4a0ce2db6857451b0096ee1240bb3e921d472ce99651f49e827963d8c54" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="4a0a6baaf7ea2264284183250cd30880d4661515298eac67e9fa0b7ffbe8cdee" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="1be7d8579010cde4900b262719e62cdef6077b4308dd46eefc94b8dfbb10ea28" name="sssd-ipa" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="4a340d36d2caa460b50035ed31eb5362e4644530c6f2034456edb83559a71d6e" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="e186cd652d1072c0d12ec5ae6ba004eedcc05f3945261f1e1612ae4cbfa4a078" name="sssd-kcm" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="ff59959e9defae5ae86c2f6889efdc591cd61913a46d6c07f95d3839445058d3" name="sssd-kcm" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="6e65244f567e3becadb93f63744c350789c14543796faaadcdfd1e9f17cacfa1" name="sssd-krb5" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="e638a853fb566ef405e6d8fdbe13951d94b5d78a5116b038ce0669c44c3af75d" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="7822de02a3d51c3f8c5c3f0bd3a67f8e0476e2f77f47a9a014eef61a0e0bd526" name="sssd-krb5-common" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="06278b4fe9c954a4fdb2e7ef5a952a4cd7f2ce5c472c088976f02db8faea242f" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="f633f91c5078a55cb39a48506da52bd38fd2369efdc3a03062fdd6f5887525ae" name="sssd-ldap" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="92c6680e2757a302f5003d6d574647e9ee3bb28d658912f1e8a8e62afb45ebbb" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="7dbbf410eff5aaad796a30b441c08265b860200b76eec8e167de4d38caebfe86" name="sssd-libwbclient" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="0baf6da8aa1142514986825bb4e607f31f3b4e12ad37efe3ea22f53769786e6f" name="sssd-libwbclient" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="1c07971d8db2989126eb40cf7f0c62f4f3687384d7434f55e2e6aad5196433c5" name="sssd-libwbclient-devel" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="9e42eb447f14920746d20618a0dd276087db160b23c0ae4ae3d435cee0835272" name="sssd-libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="ea18f9ffbf9a4bdcc1d39c43a6ef849328276af763474aa86802e84a07c523eb" name="sssd-polkit-rules" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="0017dbfdb2a51d05093e6b0c84c35e93a6b85b03777fb46647e472740aeb6b9a" name="sssd-polkit-rules" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="cd2972c47a5d38b7b2ce58a51aefbd59f5a6473f1e9c2f8c3a4ad92308aaf528" name="sssd-proxy" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="927c7e8e8e26cf5797fb1d773840ad80d5c08ef5634c9972f6dead561e1027fb" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="5afe1673a5ff5d0d0c3d009854b6b574a20c53b63f80f95c014dc93c15ca0e32" name="sssd-tools" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="f626b1b0d6e7ce960ada1b5f8e3b5b1e10085e4ac952b7f7814ed3ce6679159e" name="sssd-tools" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="3f8937b595046f0c06341482ddd3cd7e913c7b77b141b106c7feee7ee6c938a7" name="sssd-winbind-idmap" arch="i686">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="b95649d85f862fe423679891cc3601d5f0123c8ccdc1a75e028bfe637dd20e9c" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="21.el7_7.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-12" date="1555329600">- Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                         - This was partially fixed by the rebase, but one
                           spec file change was missing.</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-14" date="1555329601">- Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                           and fails otherwise</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-15" date="1558353600">- Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                           /trusts</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-16" date="1558353601">- Resolves: rhbz#1707759 - Error accessing files on samba share randomly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-17" date="1559044800">- Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                           properly</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-18" date="1559044801">- Resolves: rhbz#1710286 - The server error message is not returned if
                           password change fails</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.4-19" date="1559044802">- Resolves: rhbz#1707959 - sssd does not properly check GSS-SPNEGO</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-20" date="1559908800">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21" date="1559908801">- Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
- Rebuild japanese gmo file explicitly</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.4-21.1" date="1570622400">- Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                           config option for known domains [rhel-7.7.z]</changelog>
</package>
<package pkgid="a0b4e67a989ab2501ce226c5c734af0d2b425f45d155f86ff995b4105abfe792" name="subscription-manager" arch="i686">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="50cccb533321217383991113eca27604affc3c3024040141d2cfc812492eedb7" name="subscription-manager" arch="src">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="f433db0941cd7e7f14643685ac40ca6f6a97f9b8e7600601092c4b2ba182793d" name="subscription-manager" arch="src">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="8f24e54cf92bae596f0f461e5267cf980c58539429f93e5b800131bed39ab3c8" name="subscription-manager" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="1cde69c2356e1ae61b79e5379ce1b31ae5ba5e413e16c4a325637b5108eb0bfc" name="subscription-manager-cockpit" arch="noarch">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="431fd109ca0bbd83b2e8796579f6980671e3e63880329c0758ed2fb4ba0246c5" name="subscription-manager-cockpit" arch="noarch">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="10d1d4ebdf39c6fdcf83939c0d34143a8e2f1f4fa71ba7731971f4d19c936bab" name="subscription-manager-debuginfo" arch="i686">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="144fd129f4c55f05583f21891096bc87450a2ec9d58bf37e4b006648592deecd" name="subscription-manager-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="81e7bbe39106d1f974cb2836f84fef88d1b70b06598dadab190b7ab33074c2dd" name="subscription-manager-gui" arch="i686">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="1df2bd02209003969791655bef37f01d7a23550bf2cbd3b4a70c43a52377cab2" name="subscription-manager-gui" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="d8396d1d19bc659f656dd77bb5c92fda9a8a3b31e6e2447bdd40e17ae326acca" name="subscription-manager-initial-setup-addon" arch="i686">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="99c76967635713c3045e4c54d0d3acd7860e84aafdb5de5065b39676a0b27d0a" name="subscription-manager-initial-setup-addon" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="fccd00262e6e6e7f8b55ead6e9fafd8e7bce1691fe8026519b55e9497678c8a7" name="subscription-manager-migration" arch="i686">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="bc0b673f7120f5532811b033aebf8dc876794ea8dd25609508038c9ab0481298" name="subscription-manager-migration" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="b014f63cd2ca4e635eb1bfa6baa811d8204c6bde73fbf7b71973cf939d927af6" name="subscription-manager-plugin-container" arch="i686">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="630fd1f31aed1b699a7db56e4b13e0c1e5683b6c12ebd4786c9ce51657ce16da" name="subscription-manager-plugin-container" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="a38c5f06ded036f0c54f4020f8337f963032c5f0360e39f924a720c455ed4f46" name="subscription-manager-plugin-ostree" arch="i686">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="29172be8b9b93a66dafa7b264f9e2206151ae64cf020fc819cc74c48d83bcd53" name="subscription-manager-plugin-ostree" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="062ecba0258e04c7d1a0fcbc60a75cc8a61c2863657755a0bfa7aef594208d9b" name="subscription-manager-rhsm" arch="i686">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="b11e2da322a091dce3bd1e15fcc944c738c8a6849ae5b9d3d572635662a04f30" name="subscription-manager-rhsm" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="610390dfdaacd0b804439c803ded814a8e8df08af2010231cf948b6901e8e5a0" name="subscription-manager-rhsm-certificates" arch="i686">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="2b623cf3d87bd9cdd6da45ff0091e177b29caf9ce05e4420d59ef0be6af4ab2e" name="subscription-manager-rhsm-certificates" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.6-1" date="1557403200">- 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
- 1591704: Handle disabled status when golden ticket is in play
  (wpoteat@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.7-1" date="1559044800">- 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
  (jhnidek@redhat.com)
- 1703768: Display 'Status Details' correctly in GUI; ENT-1305
  (jhnidek@redhat.com)
- 1699345: Do not perform proxy check under some circumstances.
  (awood@redhat.com)
- 1698645: Ensure we use local syspurpose when there are network issues
  (csnyder@redhat.com)
- 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
- 1697563: Suppress output when collecting profile (khowell@redhat.com)
- 1696428: use enabled_metadata = 0 for disabled repositories
  (jhnidek@redhat.com)
- 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
- 1668152: Remove the Select SLA screen from initial-setup
  (nmoumoul@redhat.com)
- 1660883: Better feedback for repo commands when not registered
  (wpoteat@redhat.com)
- 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
- 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
  (jhnidek@redhat.com)
- 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
  (jhnidek@redhat.com)
- 1621275: Less communication with candlepin server from sub-man plugin;
  ENT-923 (jhnidek@redhat.com)
- 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
- 1688221: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.8-1" date="1559044801">- fix bad cherry-pick (removes uninitentional tab) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.9-1" date="1559217600">- 1703607: Remove productid cert, when it is not needed; ENT-1300
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.10-1" date="1559649600">- 1688221: update translations (csnyder@redhat.com)
- Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
  (csnyder@redhat.com)
- Revert "1621275: Less communication with candlepin server from sub-man
  plugin; ENT-923" (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.11-1" date="1560859200">- 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
- 1704421: Install only one prod cert, when RPM is available in more repos.
  (jhnidek@redhat.com)
- 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.12-1" date="1560945600">- 1722238: Report insights id as fact, when insights is installed
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-1" date="1561118400">- 1722238: Fix reporting insights id in facts on RHEL7 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-2" date="1566216000">- 1743120: Send package profile on yum transactions (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.13-3" date="1566302400">- 1743860: Update dnf-plugin dependencies for RHEL 7 (csnyder@redhat.com)</changelog>
</package>
<package pkgid="43a06a592c7c349c87c61f80585ba779e8a6265e75cad440dd74766094b03f71" name="sudo" arch="i686">
  <version epoch="0" ver="1.8.23" rel="4.el7_7.1"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-1" date="1530187200">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
  Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
  Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-2" date="1537531200">- RHEL-7.6 erratum
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-3" date="1537790400">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4" date="1550664000">- RHEL-7.7 erratum
  Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
  Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4.1" date="1571227200">- RHEL-7.7.z
- fixed CVE-2019-14287
  Resolves: rhbz#1760694</changelog>
</package>
<package pkgid="0a8b0dd4eaee7af55a97d452092c1c801fa2beb140d3e10c0e5f075a28114844" name="sudo" arch="src">
  <version epoch="0" ver="1.8.23" rel="4.el7_7.1"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-1" date="1530187200">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
  Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
  Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-2" date="1537531200">- RHEL-7.6 erratum
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-3" date="1537790400">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4" date="1550664000">- RHEL-7.7 erratum
  Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
  Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4.1" date="1571227200">- RHEL-7.7.z
- fixed CVE-2019-14287
  Resolves: rhbz#1760694</changelog>
</package>
<package pkgid="98cd765574677a6867886b7d0077f35682955012a07215c8203f992167c66b42" name="sudo" arch="src">
  <version epoch="0" ver="1.8.23" rel="4.el7_7.1"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-1" date="1530187200">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
  Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
  Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-2" date="1537531200">- RHEL-7.6 erratum
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-3" date="1537790400">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4" date="1550664000">- RHEL-7.7 erratum
  Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
  Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4.1" date="1571227200">- RHEL-7.7.z
- fixed CVE-2019-14287
  Resolves: rhbz#1760694</changelog>
</package>
<package pkgid="baab8bcb7ee9bbe3a963d0b9c5dff02d0ef75d8608fc44224dce324fa88a9eda" name="sudo" arch="x86_64">
  <version epoch="0" ver="1.8.23" rel="4.el7_7.1"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-1" date="1530187200">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
  Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
  Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-2" date="1537531200">- RHEL-7.6 erratum
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-3" date="1537790400">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4" date="1550664000">- RHEL-7.7 erratum
  Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
  Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4.1" date="1571227200">- RHEL-7.7.z
- fixed CVE-2019-14287
  Resolves: rhbz#1760694</changelog>
</package>
<package pkgid="9c5262920516274deacca8a033eb114acfc9da1061c00e87bc079c55c4353a35" name="sudo-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.23" rel="4.el7_7.1"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-1" date="1530187200">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
  Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
  Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-2" date="1537531200">- RHEL-7.6 erratum
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-3" date="1537790400">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4" date="1550664000">- RHEL-7.7 erratum
  Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
  Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4.1" date="1571227200">- RHEL-7.7.z
- fixed CVE-2019-14287
  Resolves: rhbz#1760694</changelog>
</package>
<package pkgid="07e25f2e784b638f6c4abae1b837ece291564d685f8bbeef23a6a0e47e2a0c42" name="sudo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.23" rel="4.el7_7.1"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-1" date="1530187200">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
  Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
  Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-2" date="1537531200">- RHEL-7.6 erratum
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-3" date="1537790400">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4" date="1550664000">- RHEL-7.7 erratum
  Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
  Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4.1" date="1571227200">- RHEL-7.7.z
- fixed CVE-2019-14287
  Resolves: rhbz#1760694</changelog>
</package>
<package pkgid="b239bba51f32d71d1e63827602581c385eae314fb11c63d9f61e26d5cfbcc0df" name="sudo-devel" arch="i686">
  <version epoch="0" ver="1.8.23" rel="4.el7_7.1"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-1" date="1530187200">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
  Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
  Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-2" date="1537531200">- RHEL-7.6 erratum
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-3" date="1537790400">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4" date="1550664000">- RHEL-7.7 erratum
  Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
  Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4.1" date="1571227200">- RHEL-7.7.z
- fixed CVE-2019-14287
  Resolves: rhbz#1760694</changelog>
</package>
<package pkgid="bfd531752ad2376938e4ed99532978df086b80fede7edd61466a7eb61de40a92" name="sudo-devel" arch="x86_64">
  <version epoch="0" ver="1.8.23" rel="4.el7_7.1"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-1" date="1530187200">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
  Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
  Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-2" date="1537531200">- RHEL-7.6 erratum
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-3" date="1537790400">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4" date="1550664000">- RHEL-7.7 erratum
  Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
  Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4.1" date="1571227200">- RHEL-7.7.z
- fixed CVE-2019-14287
  Resolves: rhbz#1760694</changelog>
</package>
<package pkgid="4ade331e6c6788bc85a5bc7a225d26ba5b57591c2dd46050814e9dcb5e9d6272" name="systemd" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="9cddacfc83ee69b62e9e781541be1c4e93915b580793372f702a4c31ad7a4347" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="71ca52ed32e4a9427a5a7057d1d629e9f3c4d63a04fffeac831455c2018bd188" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="e36d32d6f704814c5a246d635d9f5544508174c8c96e67272d9afdf6b012a78f" name="systemd" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="40f7b58a7db4e58b0308c44a56e6c80ab4b1dc378567648e1528056ea6df0d1a" name="systemd" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="dec9fd029327f282f4dffed1ccc1cde20b50aa579524f36d9ef37826a9ed6d9b" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="8ff41bc965dec9ef9f7e141c5250576e7c47dfc97226f92de7f58c37396aae21" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="93b5b5d98960be2f78ced44760f96b04e2c1c9c47db7faeb840d1a6035b7de1b" name="systemd" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="112d4188908e8d3b5a5e679b3822e509cc33538f99bc8537e6fd9b372fe19532" name="systemd" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="236d578b342b13a52f68dda163f493b19612aa8c7f4d214568da8866f5acf0bd" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="da707b8dddb27d7e21583b234d73e545c3594b25772707294b57abbc5138188d" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="7294c28870b8a590a840d8871555db1c89d61dfe127e79c86ced59782a088754" name="systemd" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="fb6fd370542969da02191ea5dc091721e6513b11d7ef27c406576c620ec650d8" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="93d2ae3a3d60677df919bdab7d1b4c8ef5659e63d689e9795e9e83d13a1099c8" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="7e96a4b2b4372a7c96a333e36af9daf37a00e61d6cf5ff77af3e0557e3d112de" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="caa7998f06becf5288e7c8101f2770575cb387ac825a1a4029c487a2bbb76ed5" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="8a3900944717725cad670597963254fcb90877f098defd944ee6789bfa563505" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="f0e130e55accddd2a0c4216787cab3322ba92c515805e1cc060cf33062fe31a1" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="defb090fd7e973b7286f552d5dd7fc2d26afc399344a01af41e49ae4a21750a1" name="systemd-devel" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="0e263e8295cbef410cbef78493102c4cd875270b2b5d5b0de6bbc2fb610bd104" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="9e1bcb27c293dfa4fdcd11cd186d694e643b042449b49136588eb02d6815f8f8" name="systemd-devel" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="8d8fc44dca3b91047669df6dc6d28440e21ff05561cda7216847f4ecaf42cce2" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="ecd536967a128dcbddccf5d5a1e3b70f14bdacc757d17b1a2fdef76c46072017" name="systemd-devel" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="07383efc0bc8fb0efa569181cc0e9eb048753ed903665fb270da3a909b689af3" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="aa1c73168aa644d44dabc3054335aa87e2db71e67aceb930846d69db62252b5e" name="systemd-journal-gateway" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="199a75aa0c3694eb42a33a3a3ac7ba6c047aa91e9e4da35705461b5261b98aa8" name="systemd-journal-gateway" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="d0a78e6a78c984f8fede23ac65c3742229bc40393612c263d9892b2ff24c99c8" name="systemd-journal-gateway" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="22b4e331cf719d201b0939c33070e624775d653b994709584af9d5f142bea232" name="systemd-journal-gateway" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="9fc747d5623fef445948474cd5d1725d80e7f1917323fc624a3de103bc82cd1e" name="systemd-journal-gateway" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="bc31fcff084dede4d0ac8b0d421e4c7909b1f00892a3dd463e5c971259231414" name="systemd-journal-gateway" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="cb600ac81799280c7bd91096492a6da260fbea73c8168059a066190b358472a8" name="systemd-libs" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="967033f4990700b163d87b684624acb165e1709c9424e0eb065d5ad17ebd9442" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="b33c00686a2285f7565dab69766ed6888b5d7a95c9602d79595ee0cdd90c9909" name="systemd-libs" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="2ff549ff1f9ebecceba1b1db887f79f4c04f4cd83b16019df8968171c05ef6b5" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="e9e7271657ffcc9acbd200b06bbf0726543be1303f58d21db8363bb80e603458" name="systemd-libs" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="9346babc40e5287dbbed1a7cdaacc99ad37b93243e324ad6c2ac2875b83673a3" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="125f20e5a0660427b3c37c9436c57c81ba5bea2537c1a2ddd840fbd4c2a226b9" name="systemd-networkd" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="56e1fe8305d0df0a291676e66367731acd41e8fef3936245245b01e2813d7f31" name="systemd-networkd" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="606d9e9af8d49b928394539ef5fa8c88e857793d6b692deab37d0c74396e46b5" name="systemd-networkd" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="860c46c27274c5ffe0b5d96ac35b11818fb2bfda9d7777c861474de65704c0bf" name="systemd-networkd" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="0074fa89a0d3b0adcef2272c4e4d85ed98d4c8d7626de9cbe22694d17be8d47f" name="systemd-networkd" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="e165a8c22391cdc0db8292c1ef3cf58728677b0621f00e5e633796a6b93158b1" name="systemd-networkd" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="e1d994457a9bd375208872dbc6e05b659d5787d3241c87f05cc19faf53f8a8af" name="systemd-python" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="7d973e56fd7fb3c5b430ef502a99dd8ab8df2fc99d16c515fb6f5bed8d55d219" name="systemd-python" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="bb338d38c8e283349f4e06341f97d61341b65d997e82899adc4fb842ec208ecc" name="systemd-python" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="5805c6e6c15f0dab4c8d20c7ef3cc21c30227e91d99db56ec7fc9b84213be3eb" name="systemd-python" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="46d5283606d767dab458a11b1fb616bdd97b8509c0d12354cb1f45354fa1e164" name="systemd-python" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="e8e1d47485b7b015e6a28d53b482b34b68b32dcbbf2fda25a8607cfcd96bff82" name="systemd-python" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="5fe5b6bfb9ed6f57ed140e3d7e88cb6b01a9269406050936f0a31511833450a7" name="systemd-resolved" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="f46a0f4917bf72d4388a0c836ed1e23459c4713a647be33975b0a4b2b1e31317" name="systemd-resolved" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="c69618c949c47f676d6814ab43cccef02ccd059f49332d168ebcf80a9ca84d04" name="systemd-resolved" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="0e1764d25b4397bb09cbd13aa1b860c35a75e3dfdcc0169fe180073224bceba0" name="systemd-resolved" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="3bd7fcfd71bac45d61370582319adcc147d13216745a9e6e844656a71ddcef1d" name="systemd-resolved" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="1bd326c7ef2accc224af166680123315c76350e669b8792ec7bb14527e897d02" name="systemd-resolved" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="af5247d56c40d4059aa4cc11302412d92a5089c2a5192ee4b99cec6a7e5aff44" name="systemd-sysv" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="175621053a46a8dbba6da712c7b68c8a538b3eadcf49f7d89c4db1852b2490e2" name="systemd-sysv" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
</package>
<package pkgid="206594aa9dff8e602b5a775876b21e0315e61c4edcbaa0c09e121d0a818cfeb4" name="systemd-sysv" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="0a5104b85f3c768a3c2f66d4d4984ddc0107c5eace9eb5a25e8a35462ef47636" name="systemd-sysv" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
</package>
<package pkgid="d4297cc744f85b2648055630f769e5e1f742cdf409ac5c10be6b6c895d72f903" name="systemd-sysv" arch="i686">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="c1423c8eba922e3281651b7a34729f9b6599473ee6cf68767c5b386164609991" name="systemd-sysv" arch="x86_64">
  <version epoch="0" ver="219" rel="67.el7_7.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-63" date="1547726400">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)
- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-64" date="1553688000">- detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
- core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
- networkd: respect DHCP UseRoutes option (#1663365)
- networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
- networkd: dont crash when mtu changes (#6594) (#1663365)
- tmpfiles: "e" takes globs (#1641764)
- tmpfiles: 'e' is supposed to operate on directory only (#1641764)
- tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
- bus-message: do not crash on message with a string of zero length (#1643396)
- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
- set automount state to waiting when the mount is stopped (#1651257)
- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- shorten hostname before checking for trailing dot (#1631625)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
- local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
- 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
- core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
- units/rescue.service.in: fix announcement message (#1660422)
- systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
- main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
- shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
- journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
- journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
- journal-remote: show error message if output file name does not end with .journal (bz#1267552)
- artificially serialize building of .policy files (#1272485)
- cryptsetup: add support for sector-size= option (#9936) (#1571801)
- cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
- journal: fix syslog_parse_identifier() (#1657794)
- journal: do not remove multiple spaces after identifier in syslog message (#1657794)
- tmpfiles: change ownership of symlinks too (#1620110)
- tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
- shared/install: allow "enable" on linked unit files (#1628575)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-65" date="1556798400">- backport fd_is_fs_type (#1663143)
- backport chase_symlinks (#1663143)
- fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
- fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
- sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
- notify: add new --uid= command (#1663143)
- core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
- journald: respect KeepFree= as well as MaxUse= values (#1361893)
- shutdown: in_container was used before its definition (#1693716)
- core: Fix edge case when processing /proc/self/mountinfo (#1691511)
- sd-bus: deal with cookie overruns (#1693559)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
- Allocate temporary strings to hold dbus paths on the heap (#1667871)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
- udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
- udev: call poll() again after killing the spawned process (#1697909)
- udev: check age against both timeouts to prevent integer wraparound (#1697909)
- avoid possible hang if our child process hangs (#1697909)
- missing: when adding syscall replacements, use different names (#1694605)
- include sys/sysmacros.h in more places (#1694605)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-66" date="1557835200">- sd-bus: unify three code-paths which free struct bus_container (#1643394)
- hashmap: don't use mempool (#1609349)
- man: be more explicit about thread safety of sd_journal (#1609349)
- selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 219-67" date="1560945600">- fix mis-merge (#1714503)
- fs-util: chase_symlinks(): prevent double fre (#1714782)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.1" date="1562932800">- return error value on failure (#1729226)
- revert local changes made during backport of the test (#1729226)
- core/timer: Prevent timer looping when unit cannot start (#1729230)
- core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
- core: rerun GC logic for a unit that loses a reference (#1729228)
- pid1: rename unit_check_gc to unit_may_gc (#1729228)
- pid1: include the source unit in UnitRef (#1729228)
- pid1: fix collection of cycles of units which reference one another (#1729228)
- pid1: free basic unit information at the very end, before freeing the unit (#1729228)
- pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
- service: relax PID file symlink chain checks a bit (#8133) (#1729414)
- path-util: fix more path_is_mount e792e890f fallout (#1279231)</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 219-67.2" date="1568894400">- core: exclude .slice units from "systemctl isolate" (#1751130)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-67.3" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1778083)</changelog>
</package>
<package pkgid="1806062b011607f25d5aedfbef38f74d20d17037c45c0ab4e4322dd4e2787739" name="systemtap" arch="i686">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="50984785337becd789c5ab57e6770132559bb18b2dd5c74ba211a1320ba51137" name="systemtap" arch="src">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="aea996e1225231043305e63ce0e68f493df242fb6318a85848f7d3461af541e8" name="systemtap" arch="src">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="f3e413bfd54961e5fe8c218cbd90fd8f9abff2b305e5fe0e9e644fdb1d33fd2d" name="systemtap" arch="x86_64">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="facba8d55104ab73f4f4ea825680ac1918ca30fa56284fffd519f08437dae71a" name="systemtap-client" arch="i686">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="8dee56469b0887b3601383f3aab21a9a31e873085b61a6201bd47f0689b09a9b" name="systemtap-client" arch="x86_64">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="367bc83e335da63e67a9cb4a872040a0f3da0a9674bab5a77ed0da18f34d8926" name="systemtap-debuginfo" arch="i686">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="5a2e7e7b2719abc263df05fe448f5db2ebefa828018b543aa0affcbaaacb19de" name="systemtap-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="24b735764cd2eab29aad79175b2fa3b70281574fd1bc47ed770a33e4e057308d" name="systemtap-devel" arch="i686">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="de3dee00d941f196deb0982f6d81de19c1486ea816572ba6a42b4cd2eb875b88" name="systemtap-devel" arch="x86_64">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="5e7bb873178c6ee2bf9a8ac1545b781c9ca5ab5238fbdae26f0962430b816e58" name="systemtap-initscript" arch="i686">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="6a10a443d7a6e7f18afd21f7cfaadb82dd6f55ebf6cc9dc1b3564827af226c69" name="systemtap-initscript" arch="x86_64">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="a2b8ad2a34f0da7430d1c9505d7fcc9d7398d65cef3a7ddb92879c54346ad5e4" name="systemtap-runtime" arch="i686">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="a5931c09110e3a2c9abdfb8bacf807286dfbf92ca01e1b6c98209c394c73936a" name="systemtap-runtime" arch="x86_64">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="19cb5967015604e3bb385b0062769e5083db6aaf40cbc1b453563ab6c59697ca" name="systemtap-runtime-java" arch="i686">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="866bf56691386cfd9f19965f402e34b955f44c3cfc7e76a881e1704a3b6357c5" name="systemtap-runtime-java" arch="x86_64">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="92673df51a71f65f7c419ea43b3ed0e0ba31a3ba5bf179238988621757c60afe" name="systemtap-runtime-python2" arch="i686">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="ac91e4e04d51e4555d224fa8af1abc38ee77509b72bbafa19f0dfcf93806e906" name="systemtap-runtime-python2" arch="x86_64">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="35d02cdbb9efe0e6465d21236059624de4570e847e222a7010ead7a38566707d" name="systemtap-runtime-virtguest" arch="i686">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="507f7ccc4f977c09902b4bc4029cbb375f768527ba047f1e82da8c2f16a07dcc" name="systemtap-runtime-virtguest" arch="x86_64">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="a4e53c11448cc05758e6c3785cd45d78e797b1b561868f8c5a773b3cd8833ccd" name="systemtap-runtime-virthost" arch="i686">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="798060ee86a7e26a84f3b2d51be3574655e65813ce7c912469d808868ed44eaf" name="systemtap-runtime-virthost" arch="x86_64">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="4ddc71d688e2ee196869d2f165ee0d347816c77d9fc3ac002bef749b89fdd90f" name="systemtap-sdt-devel" arch="i686">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="49a30735f70cadb975c96a4c2a71f9358abe041db202aadb48612a19b781f7e0" name="systemtap-sdt-devel" arch="x86_64">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="4120f37e8e76c6d0e05247d5608133a58edf26e382f07d2626d084331e614766" name="systemtap-server" arch="i686">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="9b09031bf875f108020d9995d616e97874e3fc61910a8ea1650570540c58a54b" name="systemtap-server" arch="x86_64">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="7f4c84b34f982da40207034aa6ddb27c89604e2a087b60b5fccc3180f3d264ad" name="systemtap-testsuite" arch="i686">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="faeb38dbadd68ecf04b9bb5035f2949ff4b0301f3aec08cd7809ed9c74613a21" name="systemtap-testsuite" arch="x86_64">
  <version epoch="0" ver="4.0" rel="10.el7_7"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571200">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571201">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571202">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-1" date="1528545600">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.3-2" date="1530014400">- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)</changelog>
  <changelog author="Serhei Makarov &lt;smakarov@redhat.com&gt; - 3.3-3" date="1536926400">- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-7" date="1551182400">- Rebase to systemtap 4.0, add rhel8 beta-era patches</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-8" date="1551182401">- Turn on with_bpf support on x86-64 only.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-9" date="1554292800">- Backport stapbpf /dev/ksmg-related patches.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@elastic.org&gt; - 4.0-10" date="1567512000">- rhbz1731333: nfsd.proc.write loss of vlen</changelog>
</package>
<package pkgid="3cab2b43e5cda1d7a315c438d322893859f622d94cf5e61c95c21cb729ce588f" name="tcpdump" arch="i686">
  <version epoch="14" ver="4.9.2" rel="4.el7_7.1"/>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-2" date="1489752000">- Use getnameinfo instead of gethostbyaddr</changelog>
  <changelog author="root - 14:4.9.0-3" date="1491912000">- Fix tests according to our patches and libpcap version</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-4" date="1492689600">- Drop downstream patch (drop root privileges)
- Add libcap-ng as a new build dependency
- Related: #1262283</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-5" date="1494331200">- Resolves: #1441597; use bigger capture buffer than in upstream</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-6" date="1502798400">- Resolves: rhbz#1464390; Add printing support for vsockmon devices</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.2-1" date="1505390400">- Resolves: rhbz#1490842; Rebase to 4.9.2 version</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-2" date="1510574400">- Related: rhbz#1464390; added dependency on libpcap-14:1.5.3-10 due to vsockmon support</changelog>
  <changelog author="Michal Ruprich - 14:4.9.2-3" date="1510747200">- Related: rhbz#1464390; build against latest libpcap</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-4" date="1559563200">- Resolves: #1664648 - tcpdump post creates user and groups unconditionally, raising alerts in corporate environment</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-4.1" date="1571054400">- Resolves: #1761349 - CVE-2018-19519 tcpdump: Stack-based buffer over-read in print-hncp.c</changelog>
</package>
<package pkgid="1aa585ba70032e14a72b86c602ddc92ee7d71a2dcb8b662440c5193da12cd1e3" name="tcpdump" arch="src">
  <version epoch="14" ver="4.9.2" rel="4.el7_7.1"/>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-2" date="1489752000">- Use getnameinfo instead of gethostbyaddr</changelog>
  <changelog author="root - 14:4.9.0-3" date="1491912000">- Fix tests according to our patches and libpcap version</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-4" date="1492689600">- Drop downstream patch (drop root privileges)
- Add libcap-ng as a new build dependency
- Related: #1262283</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-5" date="1494331200">- Resolves: #1441597; use bigger capture buffer than in upstream</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-6" date="1502798400">- Resolves: rhbz#1464390; Add printing support for vsockmon devices</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.2-1" date="1505390400">- Resolves: rhbz#1490842; Rebase to 4.9.2 version</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-2" date="1510574400">- Related: rhbz#1464390; added dependency on libpcap-14:1.5.3-10 due to vsockmon support</changelog>
  <changelog author="Michal Ruprich - 14:4.9.2-3" date="1510747200">- Related: rhbz#1464390; build against latest libpcap</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-4" date="1559563200">- Resolves: #1664648 - tcpdump post creates user and groups unconditionally, raising alerts in corporate environment</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-4.1" date="1571054400">- Resolves: #1761349 - CVE-2018-19519 tcpdump: Stack-based buffer over-read in print-hncp.c</changelog>
</package>
<package pkgid="632e04bb50192336ab12034d4710b51893182bf999b2954221551f4063387e29" name="tcpdump" arch="src">
  <version epoch="14" ver="4.9.2" rel="4.el7_7.1"/>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-2" date="1489752000">- Use getnameinfo instead of gethostbyaddr</changelog>
  <changelog author="root - 14:4.9.0-3" date="1491912000">- Fix tests according to our patches and libpcap version</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-4" date="1492689600">- Drop downstream patch (drop root privileges)
- Add libcap-ng as a new build dependency
- Related: #1262283</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-5" date="1494331200">- Resolves: #1441597; use bigger capture buffer than in upstream</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-6" date="1502798400">- Resolves: rhbz#1464390; Add printing support for vsockmon devices</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.2-1" date="1505390400">- Resolves: rhbz#1490842; Rebase to 4.9.2 version</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-2" date="1510574400">- Related: rhbz#1464390; added dependency on libpcap-14:1.5.3-10 due to vsockmon support</changelog>
  <changelog author="Michal Ruprich - 14:4.9.2-3" date="1510747200">- Related: rhbz#1464390; build against latest libpcap</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-4" date="1559563200">- Resolves: #1664648 - tcpdump post creates user and groups unconditionally, raising alerts in corporate environment</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-4.1" date="1571054400">- Resolves: #1761349 - CVE-2018-19519 tcpdump: Stack-based buffer over-read in print-hncp.c</changelog>
</package>
<package pkgid="78639d7c409d60ddbccfa0aeced94ebae273423eb9aa2f184cc60d1749f5aa40" name="tcpdump" arch="x86_64">
  <version epoch="14" ver="4.9.2" rel="4.el7_7.1"/>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-2" date="1489752000">- Use getnameinfo instead of gethostbyaddr</changelog>
  <changelog author="root - 14:4.9.0-3" date="1491912000">- Fix tests according to our patches and libpcap version</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-4" date="1492689600">- Drop downstream patch (drop root privileges)
- Add libcap-ng as a new build dependency
- Related: #1262283</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-5" date="1494331200">- Resolves: #1441597; use bigger capture buffer than in upstream</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-6" date="1502798400">- Resolves: rhbz#1464390; Add printing support for vsockmon devices</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.2-1" date="1505390400">- Resolves: rhbz#1490842; Rebase to 4.9.2 version</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-2" date="1510574400">- Related: rhbz#1464390; added dependency on libpcap-14:1.5.3-10 due to vsockmon support</changelog>
  <changelog author="Michal Ruprich - 14:4.9.2-3" date="1510747200">- Related: rhbz#1464390; build against latest libpcap</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-4" date="1559563200">- Resolves: #1664648 - tcpdump post creates user and groups unconditionally, raising alerts in corporate environment</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-4.1" date="1571054400">- Resolves: #1761349 - CVE-2018-19519 tcpdump: Stack-based buffer over-read in print-hncp.c</changelog>
</package>
<package pkgid="c1fd53956603334a5ff38ce47b3a158abbd3e0372790e32e833b312b8c5e5368" name="tcpdump-debuginfo" arch="i686">
  <version epoch="14" ver="4.9.2" rel="4.el7_7.1"/>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-2" date="1489752000">- Use getnameinfo instead of gethostbyaddr</changelog>
  <changelog author="root - 14:4.9.0-3" date="1491912000">- Fix tests according to our patches and libpcap version</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-4" date="1492689600">- Drop downstream patch (drop root privileges)
- Add libcap-ng as a new build dependency
- Related: #1262283</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-5" date="1494331200">- Resolves: #1441597; use bigger capture buffer than in upstream</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-6" date="1502798400">- Resolves: rhbz#1464390; Add printing support for vsockmon devices</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.2-1" date="1505390400">- Resolves: rhbz#1490842; Rebase to 4.9.2 version</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-2" date="1510574400">- Related: rhbz#1464390; added dependency on libpcap-14:1.5.3-10 due to vsockmon support</changelog>
  <changelog author="Michal Ruprich - 14:4.9.2-3" date="1510747200">- Related: rhbz#1464390; build against latest libpcap</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-4" date="1559563200">- Resolves: #1664648 - tcpdump post creates user and groups unconditionally, raising alerts in corporate environment</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-4.1" date="1571054400">- Resolves: #1761349 - CVE-2018-19519 tcpdump: Stack-based buffer over-read in print-hncp.c</changelog>
</package>
<package pkgid="bfe3f8c2573c3676cd738aea52f1ea03f133eb9e11bac0322c71163901a702a6" name="tcpdump-debuginfo" arch="x86_64">
  <version epoch="14" ver="4.9.2" rel="4.el7_7.1"/>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-2" date="1489752000">- Use getnameinfo instead of gethostbyaddr</changelog>
  <changelog author="root - 14:4.9.0-3" date="1491912000">- Fix tests according to our patches and libpcap version</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-4" date="1492689600">- Drop downstream patch (drop root privileges)
- Add libcap-ng as a new build dependency
- Related: #1262283</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-5" date="1494331200">- Resolves: #1441597; use bigger capture buffer than in upstream</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.0-6" date="1502798400">- Resolves: rhbz#1464390; Add printing support for vsockmon devices</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:4.9.2-1" date="1505390400">- Resolves: rhbz#1490842; Rebase to 4.9.2 version</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-2" date="1510574400">- Related: rhbz#1464390; added dependency on libpcap-14:1.5.3-10 due to vsockmon support</changelog>
  <changelog author="Michal Ruprich - 14:4.9.2-3" date="1510747200">- Related: rhbz#1464390; build against latest libpcap</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-4" date="1559563200">- Resolves: #1664648 - tcpdump post creates user and groups unconditionally, raising alerts in corporate environment</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:4.9.2-4.1" date="1571054400">- Resolves: #1761349 - CVE-2018-19519 tcpdump: Stack-based buffer over-read in print-hncp.c</changelog>
</package>
<package pkgid="a26a042cb0648fe03780e85434ba32163feb09ac25bfbdcdeefe72ccb061c8d2" name="tuned" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="8861b3505062b68492054fbc1e8ad1ed33c1ae471ea5a6f3069f7ca04a5d8dbd" name="tuned" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="c8b10565bb2fbc5a658b54c313ad1ade280fda5736b803ab23340b360b916f02" name="tuned" arch="src">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="9887affb784073a14e6eb6fdbc0818f981f1f5323438b4172087ad3c6b4c1074" name="tuned" arch="src">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="3be9c8e69da68cf42d8a6d163c88c6922d826a9d70296ba22d731ec5cc6019fd" name="tuned-gtk" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="c7fa4a2f75272916618e2400f7a9043fee1bd3a7f838f617e30f868717295385" name="tuned-gtk" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="c4d90a95596bb8c9fa756bacc1fe3d8b17465ef94f727e0770bfeacda1dc2272" name="tuned-profiles-atomic" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="9f2f719aba167e3d02652f50a7766a023037cbf6923297173dce8594dc8a9158" name="tuned-profiles-atomic" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="2b34f03d5ce6ad9f67ec32df66fe7da393259a8c8d07fffab8965d040200f368" name="tuned-profiles-compat" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="611de2a2fa2b5b77e6dbcfbeaeebaf60b3dae39e506ba79b63d15cd215fcf639" name="tuned-profiles-compat" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="583ff427b1e1861be8f2acaf4f9c6d4709cf69681eccf1ffe5089712123afcc1" name="tuned-profiles-cpu-partitioning" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="adb4939c15d58a3e6af7921261b96d2f909a6ea6411b8216e177c5d69837014d" name="tuned-profiles-cpu-partitioning" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="7ebcda6774510d4b3802b14ff6b3f57bb516aa53316b39feaea954b511b4390b" name="tuned-profiles-mssql" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="0e40b388293fa1f098f1645a9b3b5c349c17cd9463a823702057f1fc414bfa6e" name="tuned-profiles-mssql" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="c3c189cc44ad1eb5d094ca851b3b96674c49786185632b67298bda1292bf8ea9" name="tuned-profiles-nfv" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="505d96b27fdbefa60cdad9be7fef3c2609ebdd055f3f67762d8b27e8621be1a4" name="tuned-profiles-nfv" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="a90a8da6117890fcb4de64260699ce9d4ee46a61f26cb1d5bcdd0d709d91ca4f" name="tuned-profiles-nfv-guest" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="539d19ce6c45418cde32e68b81a2d615a417e043e63ef14098831acef0164364" name="tuned-profiles-nfv-guest" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="db26752057541ffb38e03efc74f3ffe7eb2c57945f3952ac4db291d2168a0417" name="tuned-profiles-nfv-host" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="2c1f8988148aa1b73908d949aa1320153032022f9267250e7557383a090ea0ae" name="tuned-profiles-nfv-host" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="98a882295cd59df4bdfa23bb9132100d22f62c2ffd8c98c2c72c43ac8a603916" name="tuned-profiles-oracle" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="62be5c0bb2ea1a100f01516d38a09bae7dbe4b497178785c2799fccb203b023a" name="tuned-profiles-oracle" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="aca4d217c8e3b3098e700c374f90422ac4f57fbff94d51dfe9a734d3bb58f6e7" name="tuned-profiles-realtime" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="e2cdb65ef2e26ed5ea8af022380f661e24d0bb0ae44fc9b4e796b72d174665a3" name="tuned-profiles-realtime" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="40f4d1c586a63a502b040cb20815a38f529086438116b521d4888e83f8bbde9a" name="tuned-profiles-sap" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="c079469746091e9920ff237c29093e905fa751c576d7381853253548ba0f48c1" name="tuned-profiles-sap" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="7c44665238d4a743ef717302bfdd5f3422d248f1f7ebcca1ea57d3ed5c5f371e" name="tuned-profiles-sap-hana" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="5a54e815913bcd58d75cc0777e61e87307ce715b9368554a1b75cd224e571eba" name="tuned-profiles-sap-hana" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="3954b2f6fe5df2702f984cf18ff9df8a6e6883fbdfa321bf96ee7afd5798bef8" name="tuned-utils" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="291bc95327d1e53bc1667351edc8a9f8a16ff4b68719c89ddd4edf3876377045" name="tuned-utils" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="c608903ef1d9fc7dbaa6bc6cc25554bdf6aca071e3dda7ffbaff14534ebde994" name="tuned-utils-systemtap" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="1e6bb8e8022a63387be60bd4a2f33f5bacb2090886b6f678e29fb93fa84cb376" name="tuned-utils-systemtap" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el7_7.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-7" date="1542888000">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-8" date="1542888001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1649408</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-9" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1622239</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-0.1.rc1" date="1552219200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-5.1" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739563</changelog>
</package>
<package pkgid="ed9bda6b13038657ecb2918859986f882affa8d27dae2ec6ff2b6ef50d390d4d" name="tzdata" arch="noarch">
  <version epoch="0" ver="2019c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019c-1" date="1568203200">- Rebase to tzdata-2019c
  - Fiji will observe DST from 2019-11-10 to 2020-01-12.
  - Norfolk Island will begin observing Australian-style DST on 2019-10-06.</changelog>
</package>
<package pkgid="ec89afbd35f94cde34aa27ae07bcf2643e3ff4e002d755c4d4258bfd7a7a5089" name="tzdata" arch="noarch">
  <version epoch="0" ver="2019c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019c-1" date="1568203200">- Rebase to tzdata-2019c
  - Fiji will observe DST from 2019-11-10 to 2020-01-12.
  - Norfolk Island will begin observing Australian-style DST on 2019-10-06.</changelog>
</package>
<package pkgid="540d0f5a35fd1221364894b1b95b0d9b7b40e38d43e8d549f36d6241d3473ec4" name="tzdata" arch="src">
  <version epoch="0" ver="2019c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019c-1" date="1568203200">- Rebase to tzdata-2019c
  - Fiji will observe DST from 2019-11-10 to 2020-01-12.
  - Norfolk Island will begin observing Australian-style DST on 2019-10-06.</changelog>
</package>
<package pkgid="1b136e6087cc33fea00a382ce14496b3c27c0580c8c52ec043a6c413e6dbee33" name="tzdata" arch="src">
  <version epoch="0" ver="2019c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019c-1" date="1568203200">- Rebase to tzdata-2019c
  - Fiji will observe DST from 2019-11-10 to 2020-01-12.
  - Norfolk Island will begin observing Australian-style DST on 2019-10-06.</changelog>
</package>
<package pkgid="a042d963487bad6ebcfcf29f64c5dfdd635e33b672aeb34a66cf4e025b1ab954" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2019c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019c-1" date="1568203200">- Rebase to tzdata-2019c
  - Fiji will observe DST from 2019-11-10 to 2020-01-12.
  - Norfolk Island will begin observing Australian-style DST on 2019-10-06.</changelog>
</package>
<package pkgid="69a622ff22371bfa8ba872286c4b4d5c0668d1f2143bbe9c18f7b5278af727d8" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2019c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019c-1" date="1568203200">- Rebase to tzdata-2019c
  - Fiji will observe DST from 2019-11-10 to 2020-01-12.
  - Norfolk Island will begin observing Australian-style DST on 2019-10-06.</changelog>
</package>
<package pkgid="6c53e0f8ff017b2f68a4429f5dc82f7f413245d9810c4334a80e6c4d9e4803a1" name="util-linux" arch="i686">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="bc11a4e786c6da69f3aab167e1549551b0888a01f93808748a7b161d7258805b" name="util-linux" arch="src">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="db94cbfce52ba74975cb69999d7e7c79fe701c6a06b159680acb71dd9c66999d" name="util-linux" arch="src">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="6f98572b5c789b743aab65f87fde95b10f1ec622fed29c6fbcddc0ef5eba64b5" name="util-linux" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="afc7e4ef89976b0feeb6fff08260fbfdeb4e6447a23ac4cc3387842e0e7efacb" name="util-linux-debuginfo" arch="i686">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="8782fb48f2de19d9ef8af0c4c79303ae9feb4a13cdad9e4c8fe117d2a5b522b5" name="util-linux-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="a876147ae652a61594fbfbaf179563ce4abbf60327158b5ff833d0c9d0eadd88" name="uuidd" arch="i686">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="53bdcc3e1b5ebb9e924cd60a69a2cc11cef15134a84751578a0862f7410d7881" name="uuidd" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="61.el7_7.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61.el7_7.1" date="1572350400">- fix #1712768 - lsmem segfaults on ppc64 wih -o</changelog>
</package>
<package pkgid="127035f6268ac966511eb89c5487a5b396df491e1bbcec3925789c5c41563b87" name="virt-dib" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="c419ef7aa4d3a3a10bf5d1062d409ed7324fced953a7d0fbc8084028943fb80b" name="virt-dib" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="fa4e10c94b818cf68c79ef6ec1842b0cc6572c763ebda35967aa5250ee005484" name="virt-p2v-maker" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="8d2ed410a33894fe8d4a9e42cdb6c21da3e8f85b7a6507f21b208e2a0ff0a9f2" name="virt-p2v-maker" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="3131b1ddad3938a16c0b0977c69eac522bf1c24c5e610270dc24db958072203c" name="virt-v2v" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
</package>
<package pkgid="f4675ad7f7dbbd7940394498876cb048f15d1b3a8d26f49a20048251e200de11" name="virt-v2v" arch="x86_64">
  <version epoch="1" ver="1.40.2" rel="5.el7_7.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5" date="1559649600">- Rebase to libguestfs 1.40.2 in RHEL 7.7.
  resolves: rhbz#1621895
- v2v: uninstall the VMware Tools correctly
  resolves: rhbz#1465849
  resolves: rhbz#1481930
- v2v: fix VMware vCenter roles needed for conversion
  resolves: rhbz#1530967
- v2v: preserve the VM Generation ID
  resolves: rhbz#1598350
- Query QEMU to known whether KVM is supported
  resolves: rhbz#1605071
- v2v: add --mac option
  resolves: rhbz#1607274
- v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
  resolves: rhbz#1619665
  resolves: rhbz#1691659
- v2v: provide a way to query for the estimated size of the disks
  resolves: rhbz#1622785
- Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
  resolves: rhbz#1634248
- p2v: add an option to Shutdown the machine after the conversion
  resolves: rhbz#1642044
- v2v: fix epoch when querying installed RPM packages
  resolves: rhbz#1669395
- Use a better icon for RHEL &gt;= 7 guests
  resolves: rhbz#1679482
- v2v: improve the architecture detection of Linux kernel modules
  resolves: rhbz#1690574
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1688155
- v2v: update nbdkit information in documentation
  resolves: rhbz#1605242
- v2v: warn when a guest has 'direct' network interfaces
  resolves: rhbz#1151902
- v2v: use proper SELinux label for nbdkit sockets
  resolves: rhbz#1698437</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.1" date="1563796800">- v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
  for 'rhv-upload'
  resolves: rhbz#1726168</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.40.2-5.el7_7.2" date="1568808000">- v2v: -o rhv-upload: improve wait logic after finalize
  resolves: rhbz#1753121</changelog>
</package>
<package pkgid="a85a1f74818dad9c2caf46fab35208a380a2da95bb7e75746cffb9a60daedee0" name="xorg-x11-drv-ati" arch="i686">
  <version epoch="0" ver="19.0.1" rel="3.el7_7"/>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; 7.7.1-1" date="1475064000">- Update to latest git, this is the equivalent of 7.7.1 + fixes for use
  with xserver-1.19 (rhbz#1325613)
- Rebuild against xserver-1.19</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; 7.7.1-2" date="1487592000">- Fix more breakage from removing DRI1</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.7.1-3" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1" date="1507550400">- ati 7.10.0</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1.1" date="1527681600">- Rebuild for xserver 1.20</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.1-1" date="1527681601">- ati 18.0.1</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.1.0-1" date="1542888000">- ati 18.1.0 fix some regressions with new X server (#1648116)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 19.0.1-1" date="1553169600">- ati 19.0.1</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 19.0.1-2" date="1558612800">- Avoid breakage on Xserver reset (#1674474)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 19.0.1-3" date="1579262400">- Fix a regression with user-switching (#1789741)</changelog>
</package>
<package pkgid="eba36db104c7f1fb7eb5b15b461ebafca93f51ccfcefbe3735d11dde5bdd36f2" name="xorg-x11-drv-ati" arch="src">
  <version epoch="0" ver="19.0.1" rel="3.el7_7"/>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; 7.7.1-1" date="1475064000">- Update to latest git, this is the equivalent of 7.7.1 + fixes for use
  with xserver-1.19 (rhbz#1325613)
- Rebuild against xserver-1.19</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; 7.7.1-2" date="1487592000">- Fix more breakage from removing DRI1</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.7.1-3" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1" date="1507550400">- ati 7.10.0</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1.1" date="1527681600">- Rebuild for xserver 1.20</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.1-1" date="1527681601">- ati 18.0.1</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.1.0-1" date="1542888000">- ati 18.1.0 fix some regressions with new X server (#1648116)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 19.0.1-1" date="1553169600">- ati 19.0.1</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 19.0.1-2" date="1558612800">- Avoid breakage on Xserver reset (#1674474)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 19.0.1-3" date="1579262400">- Fix a regression with user-switching (#1789741)</changelog>
</package>
<package pkgid="9e024a0959be2c00b011acb43eadebb680d0baef9e9d673a1e7664ab13b2200d" name="xorg-x11-drv-ati" arch="src">
  <version epoch="0" ver="19.0.1" rel="3.el7_7"/>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; 7.7.1-1" date="1475064000">- Update to latest git, this is the equivalent of 7.7.1 + fixes for use
  with xserver-1.19 (rhbz#1325613)
- Rebuild against xserver-1.19</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; 7.7.1-2" date="1487592000">- Fix more breakage from removing DRI1</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.7.1-3" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1" date="1507550400">- ati 7.10.0</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1.1" date="1527681600">- Rebuild for xserver 1.20</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.1-1" date="1527681601">- ati 18.0.1</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.1.0-1" date="1542888000">- ati 18.1.0 fix some regressions with new X server (#1648116)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 19.0.1-1" date="1553169600">- ati 19.0.1</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 19.0.1-2" date="1558612800">- Avoid breakage on Xserver reset (#1674474)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 19.0.1-3" date="1579262400">- Fix a regression with user-switching (#1789741)</changelog>
</package>
<package pkgid="60a2cf72f3cfa6cf0736dfe64338927e3f4dd2327f15dab83eeb0042b3b892bf" name="xorg-x11-drv-ati" arch="x86_64">
  <version epoch="0" ver="19.0.1" rel="3.el7_7"/>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; 7.7.1-1" date="1475064000">- Update to latest git, this is the equivalent of 7.7.1 + fixes for use
  with xserver-1.19 (rhbz#1325613)
- Rebuild against xserver-1.19</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; 7.7.1-2" date="1487592000">- Fix more breakage from removing DRI1</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.7.1-3" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1" date="1507550400">- ati 7.10.0</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1.1" date="1527681600">- Rebuild for xserver 1.20</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.1-1" date="1527681601">- ati 18.0.1</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.1.0-1" date="1542888000">- ati 18.1.0 fix some regressions with new X server (#1648116)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 19.0.1-1" date="1553169600">- ati 19.0.1</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 19.0.1-2" date="1558612800">- Avoid breakage on Xserver reset (#1674474)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 19.0.1-3" date="1579262400">- Fix a regression with user-switching (#1789741)</changelog>
</package>
<package pkgid="048d7ebe6d950936dd590586cab88611feabbaffe66a4dd6b487380ee7434633" name="xorg-x11-drv-ati-debuginfo" arch="i686">
  <version epoch="0" ver="19.0.1" rel="3.el7_7"/>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; 7.7.1-1" date="1475064000">- Update to latest git, this is the equivalent of 7.7.1 + fixes for use
  with xserver-1.19 (rhbz#1325613)
- Rebuild against xserver-1.19</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; 7.7.1-2" date="1487592000">- Fix more breakage from removing DRI1</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.7.1-3" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1" date="1507550400">- ati 7.10.0</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1.1" date="1527681600">- Rebuild for xserver 1.20</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.1-1" date="1527681601">- ati 18.0.1</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.1.0-1" date="1542888000">- ati 18.1.0 fix some regressions with new X server (#1648116)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 19.0.1-1" date="1553169600">- ati 19.0.1</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 19.0.1-2" date="1558612800">- Avoid breakage on Xserver reset (#1674474)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 19.0.1-3" date="1579262400">- Fix a regression with user-switching (#1789741)</changelog>
</package>
<package pkgid="a48b84bf271d59854614b3e45db10480a340564367ac50898035fb4ffb2a9bdf" name="xorg-x11-drv-ati-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.0.1" rel="3.el7_7"/>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; 7.7.1-1" date="1475064000">- Update to latest git, this is the equivalent of 7.7.1 + fixes for use
  with xserver-1.19 (rhbz#1325613)
- Rebuild against xserver-1.19</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; 7.7.1-2" date="1487592000">- Fix more breakage from removing DRI1</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.7.1-3" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1" date="1507550400">- ati 7.10.0</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1.1" date="1527681600">- Rebuild for xserver 1.20</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.1-1" date="1527681601">- ati 18.0.1</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.1.0-1" date="1542888000">- ati 18.1.0 fix some regressions with new X server (#1648116)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 19.0.1-1" date="1553169600">- ati 19.0.1</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 19.0.1-2" date="1558612800">- Avoid breakage on Xserver reset (#1674474)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 19.0.1-3" date="1579262400">- Fix a regression with user-switching (#1789741)</changelog>
</package>
</otherdata>